[nsp] Path MTU discovery

Daniel Roesen dr at cluenet.de
Mon Apr 19 02:27:49 EDT 2004


On Mon, Apr 19, 2004 at 08:09:18AM +0200, Daniel Roesen wrote:
> The problem is that Cisco offers no way to protect against this attack
> in a direct way like Juniper does (running BGP over IPSEC).

To be fair: JunOS lacks this for LDP too. :-(

> attacks soon being tried in a new wave of interested in TCP flaws.

s/interested/interest/

> path MTU. So you're attack window is the whole time of persistance of

s/you're/your/

Sorry, my first coffee didn't take effect yet... :)


Best regards,
Daniel


More information about the cisco-nsp mailing list