Re: [Tsvwg] WGLC for Port Randomization starts now (April 1st)

[Joe Touch <[e-mail]>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Brian F. G. Bidulock wrote:
> Randy,
> 
> Randy Stewart wrote:                          (Thu, 28 May 2009 11:15:27)
>> If you don't keep a timed wait, then you could get old packets
>> injected on a new association.. for example an ABORT could
>> be tossed at you from an old association where you re-used
>> the vtag...
> 
> I'm not sure that a time-wait will do that either: that is: When
> all the vtags are in timed-wait what will you do?  If you refuse
> the connection there is a DoS attack waiting to be exploited. 

That should only happen for established (opened) connections that then
close (non-established wouldn't generate a time-wait). An endpoint that
wants to exhaust your resources can do worse with an open connection
than to run through connections and close them just to pile on the
time-waits, so it seems like this should be moot.

Joe
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkoe+DAACgkQE5f5cImnZruuRQCfSpBksya4WW3MdU8lfcxBSqSJ
DEYAoItRZbBqBnc9oKLZtad2GHzwwFvh
=l6un
-----END PGP SIGNATURE-----