search for: advtang

...stles version of the defense worked out by myself and Dan Bernstein. The defense is only used when an attack appears to be under way. It also implements an alternative defense that I call RST cookies. RST cookies have the drawback that they may not make it through all firewall setups. They have the advtange that they don''t increase the probability of a stuck TCP over lossey connections. (SYN cookies and random drop defenses both increase this probability. SYN cookies slightly more than random drops.) Its in the patch right now because I am still doing some experiments with it, and because I...