linux/net/netfilter
Jozsef Kadlecsik 4a70bbfaef netfilter: Validate the sequence number of dataless ACK packets as well
We spare nothing by not validating the sequence number of dataless
ACK packets and enabling it makes harder off-path attacks.

See: "Reflection scan: an Off-Path Attack on TCP" by Jan Wrobel,
http://arxiv.org/abs/1201.2074

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2012-09-09 22:13:49 +02:00
..
2012-08-30 03:27:19 +02:00
2011-12-16 15:49:52 -05:00
2010-07-15 17:20:46 +02:00
2011-07-01 16:11:15 -07:00
2011-07-01 16:11:15 -07:00
2011-12-16 15:49:52 -05:00