MetaFlows soon to provide Intrusion Prevention
26 views
Skip to first unread message
livio
Aug 29, 2011, 6:51:48 PM8/29/11
to Metaflows
It turns out that if you can sniff you can also block. By carefully
crafting TCP sequence numbers and sending spoofed packets one can
effectively block TCP flows. Spoofed SYN ACKs work especially well.. I
do not think they can be defeated.. Blocking UDP does not work so well
in passive mode.. For this reason and others we are also ready to
launch our inline version capable of forwarding about 1/2 Gig
sustained.
crafting TCP sequence numbers and sending spoofed packets one can
effectively block TCP flows. Spoofed SYN ACKs work especially well.. I
do not think they can be defeated.. Blocking UDP does not work so well
in passive mode.. For this reason and others we are also ready to
launch our inline version capable of forwarding about 1/2 Gig
sustained.
Reply all
Reply to author
Forward
0 new messages