DROP or REJECT FILTERS for fragmented TCP scans

From: Ali Saifullah Khan <saifullah(at)attitudex.com>
Date: Thu Apr 17 2003 - 02:02:15 EDT

How effective ( if affective ) would either IPTABLES REJECT or DROP filters be in the case of fragmented scans where the TCP header is divided over a range of smaller packets ?

Regards,
Ali Saifullah Khan

---

---

[ATTITUDEX.COM]
http://www.attitudex.com/

---

---

Select your own custom email address for FREE! Get you(at)yourchoice.com w/No Ads, 6MB, POP & more! http://www.everyone.net/selectmail?campaign=tag

---

Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the world's premier event for IT and network security experts. The two-day Training features 6 hand-on courses on May 12-13 taught by professionals. The two-day Briefings on May 14-15 features 24 top speakers with no vendor sales pitches. Deadline for the best rates is April 25. Register today to ensure your place. http://www.securityfocus.com/BlackHat-security-basics

---

Received on Thu Apr 17 13:31:20 2003