On Thu, 20 Nov 2008 23:28:31 CST, Fredrick Diggle said:

> everyone's best interest. Also Diggle Sec is working on iptables
> patches to allow those who do not want to be attacked to drop all
> traffic with the evil bit set.

Already doable:

iptables -A INPUT -m u32 --u32 "3&0x80=0x80" -m limit --limit 4/s -j LOG 
--log-prefix "iptables rfc3514 packet "


Attachment: pgptqgCd68irm.pgp
Description: PGP signature

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Reply via email to