Re: [tcpm] New I-D (draft-mahesh-persist-timeout-00.txt)

At 03:24 p.m. 13/02/2007, you wrote:

Comments inline....

>A new I-D has been posted on the IETF web site.
>
><http://www.ietf.org/internet-drafts/draft-mahesh-persist-timeout-00.txt>http://www.ietf.org/internet-drafts/draft-mahesh-persist-timeout-00.txt
>"TCP Maintenance and Minor Extensions", Mahesh Jethanandani, Murali 
>Bashyam, 9-Feb-07, <draft-mahesh-persist-timeout-00.txt> Comments are welcome.

What if I advertise a window of 1, instead?

Or, what if I advertise a window of zero, then before you abort the 
connection I advertise a window of a few bytes, and then I go back to 
advertising a window of zero (and so on)?

I think it is interesting to find a workaround for this type of 
resource exhaustion attack (as well as for Netkill, etc.).

However, I think the heuristics will need to be more complex. If not, 
it will be easy (and cheap) for the attacker to fool the proposed 
counter-measures. (the examples above are some possible ways to do so).

Kindest regards,

-- 
Fernando Gont
e-mail: fernando@gont.com.ar || fgont@acm.org
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1

_______________________________________________
tcpm mailing list
tcpm@ietf.org
https://www1.ietf.org/mailman/listinfo/tcpm