[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RFC1122 compilancy? [Fwd: Reliant Unix 5.43/5.44 ICMP port unreachable problem]



hello everyone,

when i sent the message below to one friend of mine, he said that it
should be valid for all BSD-derived TCP/IP stacks, and freebsd fixed
it only in 5.0 (31 Dec 2000, bug #23986 in category kern). sure i've
got interested whether it is applicable to OpenBSD. a little bit later
i found that this is right behaviour according RFC 1122:

------------------------------[RFC 1122]-------------------------------
3.2.2.1  Destination Unreachable: RFC-792

...

            A Destination Unreachable message that is received MUST be
            reported to the transport layer.  The transport layer SHOULD
            use the information appropriately; for example, see Sections
            4.1.3.3, 4.2.3.9, and 4.2.4 below.  A transport protocol
            that has its own mechanism for notifying the sender that a
            port is unreachable (e.g., TCP, which sends RST segments)
            MUST nevertheless accept an ICMP Port Unreachable for the
            same purpose.
------------------------------[EO RFC 1122]----------------------------

however, quick look through tcp*.c files in /usr/src/sys/netinet gives
nothing out to me. is OpenBSD RFC 1122 compilant, or its TCP code
reacts only to RST packets?

----- Forwarded message from Andrea Barisani <lcars_(_at_)_INFIS_(_dot_)_UNIV_(_dot_)_TRIESTE_(_dot_)_IT> -----
Date: Fri, 6 Apr 2001 17:28:03 +0200
From: Andrea Barisani <lcars_(_at_)_INFIS_(_dot_)_UNIV_(_dot_)_TRIESTE_(_dot_)_IT>
Subject: Reliant Unix 5.43 / 5.44 ICMP port unreachable problem
To: BUGTRAQ_(_at_)_securityfocus_(_dot_)_com

Hi to all,

I don't know if anyone might be interested in this (Reliant Unix is a sort
of archaeological OS) but sending an icmp port unreachable error to a RU
cause an immediate drop of all the connections in progress between the
server and the icmp-sender host, of course spoofing the icmp address
originator cause the drop of connections between an arbitrary host.
----- End forwarded message -----

-- 
Denis A. Doroshenko  [GPRS/IN/WAP, VAS group engineer] .-.        _|_  |
[Omnitel Ltd., T.Sevcenkos st. 25, Vilnius, Lithuania] | | _ _  _ .| _ |
[Phone: +370 9863486 E-mail: d_(_dot_)_doroshenko_(_at_)_omnitel_(_dot_)_net] |_|| | || |||(/_|_



Visit your host, monkey.org