FragmentSmack a real concern for servers — this month’s patches guard against it

Topic

New Reply

If you’re running a Windows server, take note. FragmentSmack is a real DDoS vulnerability that’s slowly becoming more prevalent. Catalin Cimpanu at ZD
[See the full post at: FragmentSmack a real concern for servers — this month’s patches guard against it]

1 user thanked author for this post.

ch100

Reply | Quote

Replies

Many AV products and firewall programs allow you to block fragmented and/or malformed IP packets. Many routers also allow you to do the same. For example, I have my home router and my AV program with a built-in firewall configured to do this, as this general type of attack has been around for years.

I wish that routers and firewall and AV programs had an additional setting such that if a flood of fragmented IP packets from a given IP address are detected, then that IP address would automatically be blocked for a user specified time period.

1 user thanked author for this post.

Flypaper

Reply | Quote

Hmm, good idea. Would it be like directing input to /dev/null ?

Reply | Quote

DDoS attacks change all the time so any protection in a SOHO router is unlikely to remain effective.

cheers, Paul

1 user thanked author for this post.

columbia2011

Reply | Quote