SI6 Networks: OpenBSD Well Ahead Of The Pack In IPv6 Fragment Handling Sanity (and RFC compliance)

Contributed by pitrh on 2012-02-21 from the they weren't supposed to exist dept.

In a blog post titled IPv6 NIDS evasion and improvements in IPv6 fragmentation/reassembly, security consultants SI6 Networks report on some experiments they conducted recently in order to test IPv6 fragment handling in various general-purpose operating systems.

While the authors did not say so in so many words, the conclusion is that OpenBSD is ahead of the pack in both RFC compliance as well as sane and secure handling of IPv6 fragments.

Read the full article over at the SI6 site: IPv6 NIDS evasion and improvements in IPv6 fragmentation/reassembly

(Comments are closed)

Comments

By Alfredo Ortega (aortega) ortegaalfredo@gmail.com on 2012-03-04 01:28

I believe this has to be Fernando Gont's work.

Latest Articles

Tue, Sep 10
- 05:39 Game of Trees 0.103 released (0)
Sun, Aug 25
- 09:13 rpki-client 9.2 released (0)
Sat, Aug 24
- 11:46 No unmodified files remain from original import of OpenBSD (0)
Wed, Aug 14
- 20:39 Game of Trees 0.102 released! (0)
- 05:31 The BSDCan 2024 Playlist is now complete (0)
Thu, Aug 08
- 09:26 OpenBSD -current moves to 7.6-beta (1)
Mon, Jul 29
- 12:27 Possible future vmm(4)/vmd(8) on arm64 (1)
Sat, Jul 27
- 11:05 UDP parallel input committed to -current (0)
Wed, Jul 24
- 05:28 Incoming: UDP parallel input (1)

Credits

Copyright © 2004-2008 Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to April 2nd 2004 as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]