[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: TCPIMPL: Minutes from LA Meeting
> I will make a couple of comments about this.
> I do not wish to refute Ran's claim --- it is entirely correct. The
> question is what is the impact of it?
It knocks the link speed right down. I disagree with Ran btw, if you
are lucky enough to be the man in the middle or on the same host as
one end you hardly need any packets to cripple a link. Its only useful
against long streaming connections but it'll take someones newsfeed
down to crawl level
> Except for ICMP packets. "port unreachable" would originate from the
> destination host, which could conceivably transit with IPsec
> protection, but all other useful ICMP packets relevant to TCP originate
> from intermediate hosts/routers:
Some firewalls send port unreachable messages because the newer administrative
messages are not understood by enough people
> are not routed as efficiently as they might. Are there other
> repercussions of ignoring them?
The packet may not arrive at all is the other repercussion. IMHO its unlikely
and its preferable to attack exposure.
Alan
References: