OpenBSD's network stack

OpenBSD's network stack
Federico Biancuzzi, 2005-10-12

SecurityFocus interviews three OpenBSD developers about their network stack protection against DoS ICMP attacks, a short comparison with Linux' stack, and some thoughts on OpenBGPD.

Colapse all | Post comment

OpenBSD's network stack 2005-10-14
Anonymous (1 replies)

lol DoS connection reset attack mitigation technique ineffective against man-in-the-middle attacker...

[ more ] [ reply ]

Re: OpenBSD's network stack 2005-10-14
Anonymous (1 replies)

Can you tell me how you can reset a connection by means of ICMP if ICMP packets no longer abort TCP connections?
...

[ more ] [ reply ]

Re: Re: OpenBSD's network stack 2005-10-15
Anonymous (1 replies)

ICMP host unreachable ? I'm really not sure whether it works in the middle of a TCP session. ...

[ more ] [ reply ]

Re: Re: Re: OpenBSD's network stack 2005-10-21
Anonymous

It doesn't. And it has never done for at least the last ten years....

[ more ] [ reply ]

OpenBSD's network stack 2005-10-14
Miguel Hernandez y Lopez

Excellent article!! ...

[ more ] [ reply ]

Ryan seems to be misinformed 2005-10-15
Anonymous (1 replies)

"Ryan McBride: The "Linux stack" is a concept that is very hard to pin down because there are so many versions, distributions, 3rd party patches and modules, etc. People might tell you that Linux has the capability to do X, Y, or Z that OpenBSD enables by default, but they don't tell you that you ha...

[ more ] [ reply ]

Re: Ryan seems to be misinformed 2005-10-19
Anonymous (2 replies)

There are more than 350 GNU/Linux distributions. Most of them don't use a vanilla version of the kernel. So, please, tell me which distribution are you talking about?

"Linux" is not only the version that you download from kernel.org; "Linux" is the kernel of each of those 350 distributions...

...

[ more ] [ reply ]

Re: Re: Ryan seems to be misinformed 2005-10-20
Anonymous (1 replies)

Linux is only the vanilla-tree from kernel.org. The others are "just" some modified kernel made by some company who need a particular feature into it. But all the work start and its based on the vanilla tree....

[ more ] [ reply ]

Re: Re: Re: Ryan seems to be misinformed 2005-10-21
Anonymous

So, RedHat is not Linux because they don't ship with vanilla kernel?

And Debian? Debian GNU/NOT-Linux?

Linux is the kernel, patched or not...
...

[ more ] [ reply ]

Re: Re: Ryan seems to be misinformed 2005-10-22
Anonymous (1 replies)

"There are more than 350 GNU/Linux distributions. Most of them don't use a vanilla version of the kernel. So, please, tell me which distribution are you talking about? "

None of them, or all of them. It seems to me that you are trying to say that because there are 350 Linux distributions, and tha...

[ more ] [ reply ]

Re: Re: Re: Ryan seems to be misinformed 2005-10-27
Anonymous

Who wants to run DecNet! I didn't even want to run it when I was a VMS admin!...

[ more ] [ reply ]