Re: Active response... some thoughts.

What about blocking only a few certain attacks, that could not be easily spoofed. Such like HTTP vulnerabilities and others that need a complete handshake to work.

Ok,its not impossible to spoof, but packet sequence prediction is a bit hard nowadays.

> From: Chris Travers [mailto:chris@travelamericas.com]
being
> able to be used to DOS an address by spoofing packets from that address.
Received on Sat Feb 8 18:42:14 2003