[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Heartbeats (was RE: keepalives)

To: Ricky Charlet <rcharlet@redcreek.com>
Subject: Re: Heartbeats (was RE: keepalives)
From: Slava Kavsan <bkavsan@ire-ma.com>
Date: Wed, 08 Dec 1999 13:19:57 -0500
CC: ipsec@lists.tislabs.com
References: <Pine.SOL.3.96.991207145457.21761J-100000@jvilhube-ss20.cisco.com> <384E9AEB.316069AB@redcreek.com>
Sender: owner-ipsec@lists.tislabs.com

Ricky Charlet wrote:

>  * Unsecured heartbeats in the clear leave you open to DOS attack as
> anybody can spoof you into thinking that your peer is no-responsive.

You don't need spoof heartbeats to make peer "into thinking that your peer is
no-responsive".
Just spoof any IKE or IPSec traffic. Heartbeats do not increase vulnerability for
such attack.

--
Bronislav Kavsan
IRE Secure Solutions, Inc.
100 Conifer Hill Drive  Suite 513
Danvers, MA  01923
voice: 978-539-4816
http://www.ire.com

References:

RE: Heartbeats (was RE: keepalives)

From: Jan Vilhuber <vilhuber@cisco.com>

Re: Heartbeats (was RE: keepalives)

From: Ricky Charlet <rcharlet@redcreek.com>

Prev by Date: Re: Heartbeats (was RE: keepalives)
Next by Date: Re: Heartbeats (was RE: keepalives)
Prev by thread: Re: Heartbeats (was RE: keepalives)
Next by thread: Re: Heartbeats (was RE: keepalives)
Index(es):
- Main
- Thread