| RFC 5961 implements mitigations against Blind reset Attack using RST, SYN or data. It is already handled in NetBSD TCP stack. A tasklist indicate it to be handled in NPF But will it be ideal to also implement in NPF ? Maybe I think to be extra security in that NPF doesn’t even let potential attacks get to our network stack. Emmanuel |