Note: Due to technical difficulties, the Archives are currently not up to date.
GMANE provides an alternative service for most mailing lists. c.f. bug 424647
> * Thomas T. Veldhouse <veldy@...> 8. Jan 04
> > Oliver Schad wrote:
> > > [DROP or REJECT]
> > One reason ... it slows down various scans.
>
> No, it doesn't. It would, if $scanner sends one SYN and wait for the
> answer to it. In fact it sends you SYNs to all your ports at once and
> collects answers (or not) in parallel. You extend the scan
> time for one
> timeout (which is nothing (~3min?) against the time to send all
> requests).
If you reject the packet does it not allow you to be used for DOSing a host
via a spoofed IP?
--
gentoo-security@g.o mailing list
|
|
