Paul O'Neil wrote:
> I posted this question to a security news group and got back the answer "its
> time for a kernel upgrade". I'm not sure what that meant since I'm using the
> latest. Perhaps a recompile with certain options is in order I dont know,
> but the question was this. After running NMAP against an iptables linux box
> and a cisco router firewall feature set one difference in the results I
> noted was that for the Linux box it displayed this at the end of the results
>> Remote operating system guess: Linux Kernel 2.4.0 - 2.4.18 (X86)
> Uptime 0.523 days (since Wed Jul 3 16:03:12 2002)
> TCP Sequence Prediction: Class=random positive increments
> Difficulty=642160 (Good luck!)
> IPID Sequence Generation: All zeros
>> The "GOOD LUCK" comment bother me. For the Cisco router it said "medium"
> instead of good luck. What exactly does this measurement mean?
It means good luck to you in trying to craft a TCP sequence prediction
attack by guessing the next number in the series. Some systems have
stupid generation sequences which can be tuned into and then predicted
if you sniff enough packets. This one doesn't.
Regards,
Vin
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
