1858: Security Considerations for IP Fragment Filtering.

HTML TXT PS PDF

IP fragmentation can be used to disguise TCP packets from IP filters used in routers and hosts. This document describes two methods of attack as well as remedies to prevent them.

Status INFORMATIONAL
Format TXT=20468 bytes
Authors P. Traina D. Reed
Date October 1995
Keyphrases fragment IP filter TCP

Updated by

RFC3128: Protection Against a Variant of the Tiny Fragment Attack (RFC 1858).

References

Referenced by

RFC3128: Protection Against a Variant of the Tiny Fragment Attack (RFC 1858).
RFC3199: Request for Comments Summary RFC Numbers 3100-3199.
RFC3511: Benchmarking Methodology for Firewall Performance.
RFC4036: Management Information Base for Data Over Cable Service Interface Specification (DOCSIS) Cable Modem Termination Systems for Subscriber Management.
RFC4459: MTU and Fragmentation Issues with In-the-Network Tunneling.
RFC4460: Stream Control Transmission Protocol (SCTP) Specification Errata and Issues.
RFC4623: Pseudowire Emulation Edge-to-Edge (PWE3) Fragmentation and Reassembly.
RFC4639: Cable Device Management Information Base for Data-Over-Cable Service Interface Specification (DOCSIS) Compliant Cable Modems and Cable Modem Termination Systems.