On Fri, 19 Oct 2007 18:52:03 +0200, Florian Weimer said:
> * Blue Boar:
> 
> > I took that to mean they were injecting RST packets, ala the great
> > Firewall of China.
> 
> RST packets do not work that well to reduce bandwidth consumption
> because the client immediately tries to establish a new connection
> (maybe to a different host, but still).  You need to do something that
> stalls the connection by confusing the TCP at one end.

Setting the TCP window to 3 bytes is a good start....

Attachment: pgpb1jwEXdbLz.pgp
Description: PGP signature

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Reply via email to