Re: Possible DoS flaw in ppp

Alan Modra (alan@spri.levels.unisa.edu.au)
Wed, 8 Apr 1998 21:42:42 +0930 (CST)


> > Well, Linux can handle it, but sometimes the PPP link goes dead with all
> > these fragment overlapping exploits. It's highly erratic, so I can't give
> > much details, but it works upstream and downstream, resulting in possible
> > DoS attacks. There is nothing in the log files and when you kill pppd and
> > restart it, the link works again. Has anybody else experienced this? I run
> > 2.0.33.
>
> I've never seen this Linux<->Linux but I have reports of it Linux->TermServer
> and it appears some terminal servers while they dont crash do basically
> choke that port when processing weird frames. I have no good hard data
> however.
>
> Can you duplicate this linux-linux, does compression and vj affect the
> behaviour.

I've seen this sort of thing happen with linux<->sunos4.2, when using
mtu=mru=1500. Always assumed it was due to dropped chars or something
at the sunos end since the sparc serial port was only capable of 38k4.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu