Alexander Nasonov's shared items

Wednesday, May 30, 2007

Interesting OpenBSD commits Especially this comment:
> Check protocol (TCP/UDP/ICMP/ICMP6) checksums of all incoming packets,
> and drop packets with invalid checksums. Without such a check, pf would
> return RST/ICMP errors even for packets with invalid checksums, which
> could be used to detect the presence of the firewall, reported by
> "Ed White" in
The link above is broken, please go to, very intersting reading.

No comments:

Post a Comment