Re: Active response... some thoughts.

On Tuesday, January 28, 2003, at 08:31 AM, Garbrecht, Frederick wrote:

> ummmm, just a technical quibble, but a TCP reset wouldn't work with the
It is just a minor quibble because the point is that the attack was completely contained in a single packet. The same would have held true if it was over a TCP/IP connection. Once the attack has been completed, a TCP RST would provide no value. It is the proverbial closing the barn doors after the horse is already out.

RST is largely a marketing solution, not a technical solution.

Todd Received on Wed Jan 29 12:28:17 2003