Re: [PATCH] SYN issue

2009-05-21 Thread Rui Paulo
On 21 May 2009, at 18:37, David DeSimone wrote: Zachary Loafman wrote: After correcting the above, any SYN that doesn't exactly match the initial sequence number results in a RST|ACK response and the ESTABLISHED connection being dropped. Maybe I am jumping to conclusions here, but does thi

Re: [PATCH] SYN issue

2009-05-21 Thread David DeSimone
Zachary Loafman wrote: > > After correcting the above, any SYN that doesn't exactly match > the initial sequence number results in a RST|ACK response and the > ESTABLISHED connection being dropped. Maybe I am jumping to conclusions here, but does this mean that someone can spoof a SYN from your I

Re: [PATCH] SYN issue

2009-05-21 Thread George Neville-Neil
On May 19, 2009, at 17:13 , Zachary Loafman wrote: net@ - A short patch attached that requires 3 paragraphs of explanation. We found an issue in TCP when the a client connects to our server, establishes a connection, reboots and chooses the same source port to re-establish the connection. Thi

[PATCH] SYN issue

2009-05-19 Thread Zachary Loafman
net@ - A short patch attached that requires 3 paragraphs of explanation. We found an issue in TCP when the a client connects to our server, establishes a connection, reboots and chooses the same source port to re-establish the connection. This isn't hard from other vendors' clients. On Solaris, t