FreeBSD and the Rose Attack / NewDawn

[Mike Silbersack]

On Sun, 8 May 2005, Suleiman Souhlal wrote:

> The patch at http://people.freebsd.org/~ssouhlal/testing/ 
> ip_reass-20050507.diff does just this.
> Could you kindly test it?
>
> Bye,
> --
> Suleiman Souhlal     | ssouhlal at vt.edu

Your patch looks like it would defeat newdawn4, but it's not general 
enough to optimize for other possible attacks.  I'll take a stab at 
implementing a more general solution tomorrow.

Mike "Silby" Silbersack