TCP SYN attacks

Fri Oct 4 23:24:16 UTC 1996

> >From: 	Tim Bass[SMTP:bass at linux.silkroad.com]
> >Sent: 	Friday, October 04, 1996 7:58 AM
> >To: 	freedman at netaxs.com
> >Cc: 	nanog at merit.edu; iepg at iepg.org
> >Subject: 	Re: TCP SYN attacks
> >
> >> 
> >> My preferred approach is to not even have to store state on any
> >> of the embryonic connections.  And to implement the fix on all
> >> of my hosts.  And customers can implement it in a firewall, if
> >> they choose (and have boxes which can't be fixed: Win95, NT, Macs, ...).
> >> 
> >> Avi
> 
> Avi,
> 
> Did you mean to state that these boxes can't be fixed (hardened against
> SYN attacks) by you?
> 
> Ted L.
> 
> My statements are my own and not of the Microsoft Corp. 

If I had Win95 or NT source I suppose I could harden them w/out
a SYN-handling proxy...

Ditto for MacOS (if that's what it's called).

Avi