[isp-bgp] Re: CERT advisory pertaining to BGP

["E.B. Dreger" <eddy+public+spam@...>]

RG> Date: Wed, 21 Apr 2004 11:54:47 -0700
RG> From: Rob Genovesi


RG> Just in case anyone out there didn't hear, there is a recent
RG> CERT advisory about a recently discovered weakness in the tcp

If you consider a few years ago to be recent.


RG> protocol that puts certain types of traffic (ie BGP) at risk.
RG> If you are running BGP it is highly recommended that you put
RG> passwords on your BGP sessions.
RG>
RG> For more details: http://www.cert.org/advisories/CA-2001-09.html

Maybe, maybe not.  See also: TTL 255 hack for protecting eBGP,
and ingress spoof filtering for protecting iBGP.

I'm seeing reports of sloppy MD5 checksum implementations that
compute the checksum _before_ other validity checks.  That can
cause trouble in routers lacking in CPU power.


Eddy
--
EverQuick Internet - http://www.everquick.net/
A division of Brotsman & Dreger, Inc. - http://www.brotsman.com/
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 785 865 5885 Lawrence and [inter]national
Phone: +1 316 794 8922 Wichita
_________________________________________________________________
          DO NOT send mail to the following addresses :
  blacklist@... -or- alfra@intc.net -or- curbjmp@intc.net
Sending mail to spambait addresses is a great way to get blocked.







To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.