TCP

I will release third (more or less unstable) release ISO if nothing will prevent me from doing that :-) The latest delphijfork includes several new features, which is tend to exhibit new technologies and possiblities of FreeBSD:

• An implementation of RFC 3522 ported from DragonFlyBSD
• An implementation of Early Retransmission ported from DragonFlyBSD

Also, FreeBSD-CURRENT has several new features, including:

• In progress import of binutils 2.15
• pf 3.5. Including several new features and works better with spamd.
• better ACPI support

I have watched spurious SYN messages and apparantly this has affected beastie.frontfree.net’s networking subsystem, namely, its mail system. The attack is from 203.81.27.11.

Whois indicates 203.81.27.11 is:

I have added some SYNFLOOD proof packet filter rules for beastie.frontfree.net. Interestingly, the filter options seems to “forge” beastie.frontfree.net to be an OpenBSD box.

I have posted it as rev. 1.5 of <research.delphij.net/freebsd/rfc3522.diff>. Some minor comestic changes has gone into the patchset, as junsu pointed out. I’ll remove the unrelated ones soon.

I have ported Jeffrey Hsu’s RFC3522 implementation in DragonFlyBSD to FreeBSD. Check https://research.delphij.net/freebsd/rfc3522.diff.

刚刚揭露的那个TCP漏洞OpenBSD在1999年就修正了……和FreeBSD现在用的方法类似，只是更严厉一些。折服了……

Mike Silberack has posted a patch related to illegal TCP RST attacks.

TCP is vulnerable?! Yes if your system relays on persist TCP connections, for example, routers supporting BGP. CERT has released a advisory about this.

Big news! After about four months Jeffrey Hsu has finally merged his fix of RFC3042 to FreeBSD!

I have posted this into the “Security” category because this is a potentially a remote-exploitable security issue. (DoS maxmium).