2 ms·
> do you want to drop syns where the last 16-bits of seq match the client's port number? I'm guessing this is something about a vulnerability in client sequenc
by JoshTriplett 1y ago
> do you want to drop syns where the last 16-bits of seq match the client's port number?
I'm guessing this is something about a vulnerability in client sequence number selection? I'm curious about the details here for what would motivate this.
- toast0 1y agoOh I'm really sorry, this wasn't a real filter I've used. It was just an off the cuff weird, but doable request. Speculatively you want to block abusive syn floods and your abuser made a weird choice in their packet generator. Sorry again! I really did just make this up.