Does SCTP help against TCP reset attacks?
Steffen Nurpmeso
steffen at sdaoden.eu
Fri Apr 15 19:41:35 AEST 2016
Ángel González <keisial at gmail.com> wrote:
|Steffen Nurpmeso wrote:
|> I don't know how you do it, i never managed a(n exposed) server
|> until January and now [.] i think what i have to face are TCP
|> RST attacks on SSH connections, leading to "connection reset"s
|> ["connection closed" on client side in fact] (of course).
|Are you sure that's the case? For RST attack, it would need to guess
|the right TCP sequence numbers.
|It seems more likely that the connection is timing out (maybe there's
|some firewall enforcing it?) and thus the other side considers it to be
|closed.
Yes there are many experts on this list who have a penetrating
knowledge of protocols and network behaviour, and i really would
prefer not having to face that attacks restart just as promptly.
Thank you!
--steffen
More information about the openssh-unix-dev
mailing list