Does SCTP help against TCP reset attacks?

Steffen Nurpmeso steffen at sdaoden.eu
Fri Apr 15 19:41:35 AEST 2016


Ángel González <keisial at gmail.com> wrote:
 |Steffen Nurpmeso wrote:
 |>    I don't know how you do it, i never managed a(n exposed) server
 |>    until January and now [.] i think what i have to face are TCP
 |>    RST attacks on SSH connections, leading to "connection reset"s
 |>    ["connection closed" on client side in fact] (of course).

 |Are you sure that's the case? For RST attack, it would need to guess
 |the right TCP sequence numbers.
 |It seems more likely that the connection is timing out (maybe there's
 |some firewall enforcing it?) and thus the other side considers it to be
 |closed.

Yes there are many experts on this list who have a penetrating
knowledge of protocols and network behaviour, and i really would
prefer not having to face that attacks restart just as promptly.

Thank you!

--steffen


More information about the openssh-unix-dev mailing list