linux-kernel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Michael Peddemors <michael@linuxmagic.com>
To: "David S. Miller" <davem@redhat.com>, kernel@pineview.net
Cc: linux-kernel@vger.kernel.org
Subject: Re: No more DoS
Date: Thu, 21 Dec 2000 20:20:06 -0800	[thread overview]
Message-ID: <0012212020061G.24471@mistress> (raw)
In-Reply-To: <977453684.3a42c2744fbb7@ppro.pineview.net> <200012220200.SAA05057@pizda.ninka.net>
In-Reply-To: <200012220200.SAA05057@pizda.ninka.net>

> Furthermore, it also cannot work because it makes retransmissions
> of the SYN/ACK very non-workable.  I suppose his TCP stack just hacks
> around this by just waiting for the original client SYN to get
> retransmitted or something like this.  I question whether that can
> even work reliably.

Be interesting to see his response, but in truth, do we care if it gets 
retransmitted?? When it does, it does...

> I think not holding onto any state for an incoming SYN is nothing but
> a dream in any serious modern TCP implementation.  It can be reduced,
> but not eliminated.  The former is what most modern stacks have done
> to fight these problems.

A dream, maybe .... but hey so were most things that we now take for granted..
Worth kicking around a bit tho...  

--------------------------------------------------------
Michael Peddemors - Senior Consultant
Unix Administration - WebSite Hosting
Network Services - Programming
Wizard Internet Services http://www.wizard.ca
Linux Support Specialist - http://www.linuxmagic.com
--------------------------------------------------------
(604) 589-0037 Beautiful British Columbia, Canada
--------------------------------------------------------
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/

  reply	other threads:[~2000-12-22  3:41 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2000-12-22  2:24 No more DoS Mike OConnor
2000-12-22  2:00 ` David S. Miller
2000-12-22  4:20   ` Michael Peddemors [this message]
2000-12-22  4:53   ` David S. Miller
2000-12-22  2:36 ` Tom Vier
2000-12-22  4:09 ` Michael Peddemors
2000-12-22  4:55 ` Michael H. Warfield
2000-12-22 18:21 ` kuznet

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=0012212020061G.24471@mistress \
    --to=michael@linuxmagic.com \
    --cc=davem@redhat.com \
    --cc=kernel@pineview.net \
    --cc=linux-kernel@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).