Blind reset Attack using SYN in NPF

Emmanuel Nyarko <[email protected]>
Newsgroups gmane.os.netbsd.devel.network
Message-ID <[email protected]> 
RFC 5961 implements mitigations against Blind reset Attack using RST, SYN or data.

It is already handled in NetBSD TCP stack. 

A tasklist indicate it to be handled in NPF
But will it be ideal to also implement in NPF ?  Maybe I think to be extra security in that NPF doesn’t even let potential attacks get to our network stack.

Emmanuel
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.