Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[TIP] Firewall : TARPIT
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index French
View previous topic :: View next topic  
Author Message
Trevoke
Advocate
Advocate


Joined: 04 Sep 2004
Posts: 4099
Location: NY, NY

PostPosted: Thu Sep 22, 2005 7:45 pm    Post subject: [TIP] Firewall : TARPIT Reply with quote

http://www.securityfocus.com/infocus/1723

Firewall : accept, refuse, drop, tarpit .. En resume, ca ouvre une connection et ca refuse de la fermer, donc il faut attendre un timeout pour que ca ferme.
*ca* ca peut etre chiant pour les gens qui veulent t'attaquer.. 8-)
_________________
Votre moment detente
What is the nature of conflict?
Back to top
View user's profile Send private message
-KuRGaN-
Veteran
Veteran


Joined: 05 Dec 2004
Posts: 1142
Location: Besançon (25) [FRANCE]

PostPosted: Thu Sep 22, 2005 8:15 pm    Post subject: Reply with quote

héhé carrement chiant, pas mal le tip :wink:

Après le Harpic pour chiottes, il y a le Tarpit pour firewall :wink: ok ok :arrow: [.]
_________________
Knight Gent00 Industries RiDeR !!!!
Back to top
View user's profile Send private message
El_Goretto
Advocate
Advocate


Joined: 29 May 2004
Posts: 2872
Location: Paris

PostPosted: Thu Sep 22, 2005 8:31 pm    Post subject: Reply with quote

J'arrive pas à comprendre si la connexion du côté "nous" reste quand même ouverte, avec les ressources nécessaires associées. Je veux dire, ya pas un risque de s'auto D.O.S.er avec ce principe?
_________________
-PC: 2500K/P8Z68V, 8Go, R9-290, ARC1220+5xWD500RE3, M4 256Go
-Home servers (hardened): µ-serv N40L, 2Go ECC ; NF9D-2700, 4Go ; DS61, i3 2100T, 16Go
-Réseau: ERL-3 + 3x switches GS108Tv2
-NAS: RN312
Back to top
View user's profile Send private message
netfab
Veteran
Veteran


Joined: 03 Mar 2005
Posts: 1590
Location: 127.0.0.1

PostPosted: Thu Sep 22, 2005 8:53 pm    Post subject: Reply with quote

Sympa :lol:
Back to top
View user's profile Send private message
Trevoke
Advocate
Advocate


Joined: 04 Sep 2004
Posts: 4099
Location: NY, NY

PostPosted: Thu Sep 22, 2005 10:13 pm    Post subject: Reply with quote

Une connection est ouverte, mais on lui donne une taille maximum de 0.

Quote:
When data transfer begins to occur, the TCP window size is set to zero, so no data can be transferred within the session. The connection is then held open, and any requests by the remote side to close the session are ignored.

_________________
Votre moment detente
What is the nature of conflict?
Back to top
View user's profile Send private message
marvin rouge
Veteran
Veteran


Joined: 01 Aug 2004
Posts: 1422
Location: Villa Lumierrante, Zonelibre

PostPosted: Fri Sep 23, 2005 6:44 am    Post subject: Reply with quote

pourquoi ca s'appelle TARPIT et pas TRAPIT ?
Back to top
View user's profile Send private message
Trevoke
Advocate
Advocate


Joined: 04 Sep 2004
Posts: 4099
Location: NY, NY

PostPosted: Fri Sep 23, 2005 12:40 pm    Post subject: Reply with quote

tar pit = puits de goudron
_________________
Votre moment detente
What is the nature of conflict?
Back to top
View user's profile Send private message
naerex
Guru
Guru


Joined: 02 Apr 2005
Posts: 316
Location: Paris, France

PostPosted: Fri Sep 23, 2005 1:18 pm    Post subject: Reply with quote

J'ai lu l'article avec beaucoup d'intéret, cette technique est excellente ! Je suis sur qu'elle va devenir un standard dans peu de temps.

...un fan de ce genre de riposte :mrgreen:
Back to top
View user's profile Send private message
_droop_
l33t
l33t


Joined: 30 May 2004
Posts: 957

PostPosted: Fri Sep 23, 2005 1:55 pm    Post subject: Reply with quote

Bonjour,

ca a l'air interessant.

Qaund tu jettes les paquets, ton ordinateur est "invisible", alors qu'avec cette méthode il devient visible (les connections se mettant en place). Mais est ce vraiment génant ?

Sinon, ils disent que le noyau gentoo contient le patch pour la cible TARPIT, mais moi je vois pas cette optiion dans la configuration (dans netfilter configuration).
Back to top
View user's profile Send private message
Trevoke
Advocate
Advocate


Joined: 04 Sep 2004
Posts: 4099
Location: NY, NY

PostPosted: Fri Sep 23, 2005 2:30 pm    Post subject: Reply with quote

Bon, je cours me faire fouetter; ou tout du moins, voila ..

http://forums.gentoo.org/viewtopic-t-295338-highlight-tarpit.html

La prochaine fois je ferai une recherche, c'est du vieux :/
_________________
Votre moment detente
What is the nature of conflict?
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index French All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum