Subject: Re: DoS using crafted ICMP "frag needed" packets
To: Jason Thorpe <thorpej@shagadelic.org>
From: Fernando Gont <fernando@gont.com.ar>
List: tech-net
Date: 06/23/2005 04:08:42
At 07:14 p.m. 22/06/2005, Jason Thorpe wrote:

>On Jun 22, 2005, at 6:06 AM, Kevin Lahey wrote:
>
>>For a solution to the problem of untrustworthy probes and just a
>>general
>>update of PMTUD stuff, see:
>>
>>     http://www.ietf.org/internet-drafts/draft-ietf-pmtud-method-04.txt
>
>Very cool.  I assume you have an implementation ready for NetBSD? ;-)

It's not that cool. Please analyze the convergence time.And you can also 
serach throught the relevant (PMTUD WG) mailing-list for a message aI 
posted that raises several issues the draft doesn't addresss.


--
Fernando Gont
e-mail: fernando@gont.com.ar || fgont@acm.org