Re: Other possible protection against RST/SYN attacks (was Re: TCP

MT> Date: Wed, 21 Apr 2004 12:30:40 -0400
MT> From: Mike Tancsa


MT> If the attacker were on the same subnet this would not do
MT> anything, but you have larger problems if this is the case.

Indeed.  Anti-spoofing, per-switchport MAC restrictions, and
hardcoded ARP entries for routers all go a long way toward
improving security. :-)


Eddy
--
EverQuick Internet - http://www.everquick.net/
A division of Brotsman & Dreger, Inc. - http://www.brotsman.com/
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: [phone] Lawrence and [inter]national
Phone: [phone] Wichita
_________________________________________________________________
          DO NOT send mail to the following addresses :
  [e-mail] -or- [e-mail] -or- [e-mail]
Sending mail to spambait addresses is a great way to get blocked.

_______________________________________________
[e-mail] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[e-mail]"