Penetration Testing mailing list archives

Are Fragmentation Attacks Still Used for IDS/IPS Evasion?


From: seclt yuri <secltyuri () yahoo com>
Date: Tue, 25 Sep 2007 13:40:50 -0700 (PDT)

Hi,
  I was just reading up on fragmentation attacks using
fragrouter and fragrouter as a mean of IDS/IPS
evasion.  However, since almost all firewalls both
commercial and free (iptables for examples) now have
support for fragment reassembly, are fragmentation
attacks still effective?  Thanks.


       
____________________________________________________________________________________
Need a vacation? Get great deals
to amazing places on Yahoo! Travel.
http://travel.yahoo.com/


------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: