[c-nsp] FW: Cisco Security Response: [Full-disclosure] Cisco PIX TCP Connection Prevention

Virgil virgil at webcentral.com.au
Wed Nov 23 20:32:17 EST 2005


On 23/11/05 9:07 PM, "Andrew Yourtchenko" <ayourtch at cisco.com> wrote:

> I believe setting econn to some reasonably "small" value (like
> 50 or such for an average single-host setup) would be a more
> conservative approach - normal flow of things would not be affected, and
> it will allow you to trivially detect, should the attack be taking place.


Is this information going to be added to the official advisory?

Regards
Virgil

-- 
Virgil
Network Architect, AS7496
virgil at webcentral dot com dot au



More information about the cisco-nsp mailing list