- From: Tuexen Michael <Michael.Tuexen AT icn.siemens.de>
- To: "'discussion AT sctp.de'" <discussion AT sctp.de>
- Subject: RE: [SCTP-Discussion] SCTP queries
- Date: Fri Jun 29 13:06:01 2001
- List-id: SCTP Discussions <discussion.sctp.de>
Dear all,
see my comments below.
Best regards
Michael
Michael Tuexen Tel.: +49 89 722 47210
Siemens AG Fax: +49 89 722 48212
ICN WN CS SE 5 E-mail:
Michael.Tuexen AT icn.siemens.de
>
-----Original Message-----
>
From: kusum
>
[SMTP:kusum AT india.mercurykr.com]
>
Sent: Friday, June 29, 2001 12:43 PM
>
To:
>
discussion AT sctp.de
>
Subject: Re: [SCTP-Discussion] SCTP queries
>
>
Cookie mechanism is now clear to me....Thanks alot for clearing my
>
doubts....
[Tuexen Michael] You are welcome.
[Tuexen Michael]
for multihoming yes it is mention for SCTP endpoint...
>
here i am giving lines of RFC 2960
>
"An SCTP endpoint is considered multi-homed if there are more than one
>
transport address that can be used as a destination address to reach
>
that endpoint."
>
so tell me this is true ......or it should be for IP addrreses instead of
>
transport
>
addresses..
[Tuexen Michael] It is correct. But keep in mind that
in the definition of SCTP endpoint it is mentioned that
"All transport addresses used by an SCTP endpoint must use the same
port number, but can use multiple IP addresses. "
So, the definitions are consistent.
>
kk
>
>
>
>
Tuexen Michael wrote:
>
>
> Dear all,
>
> see my comments below.
>
> Best regards
>
> Michael
>
>
>
> Michael Tuexen Tel.: +49 89 722 47210
>
> Siemens AG Fax: +49 89 722 48212
>
> ICN WN CS SE 5 E-mail:
>
> Michael.Tuexen AT icn.siemens.de
>
>
>
> > -----Original Message-----
>
> > From: kusum
>
> > [SMTP:kusum AT india.mercurykr.com]
>
> > Sent: Friday, June 29, 2001 5:00 AM
>
> > To: discussion
>
> > Subject: [SCTP-Discussion] SCTP queries
>
> >
>
> > Hi! all,
>
> >
>
> > Here are some queries for SCTP which i couldn't understand...
>
> > 1)what kind of security is provided by cookie mechanism and how?As every
>
> > feature of SCTP has reason behind it like multiple streams resolves the
>
> > problem of head of line blocking,and during association iniitalization
>
> > we deal the temperory TCB for resolving SYN attack problem of TCP .So
>
> > for which purpose we r using cookie mechanism?
>
> >
>
> [Tuexen Michael] Consider an attacker who is flooding you with
>
> INITs. He is using his own IP address or is using a different
>
> (spoofing).
>
> The receiver will send back INIT-ACKs and forget about the assoc.
>
> So
>
> NO resources at the receiver will be reserved for the attacker.
>
> Only if
>
> you got back the COOKIE from the sender of the INIT you will
>
> reserve some
>
> resources. If the attacker is spoofing the IP Address, this will
>
> never happen.
>
> > 2)It is mentioned in RFC that a host is multihomed if it is having
>
> > multiple transport address.but i think it shouldn't be like this.it
>
> [Tuexen Michael] Where do you find this? I don't find the
>
> place where this is stated. I find a lot of 'multi-homed
>
> endpoints'.
>
> > should be a host is multihomed if it support multiple IP addresses.
>
> > as we know that if we have one IP address and two ports
>
> > in that case we have two different transport address with same IP
>
> > address and different port numbers.but i think this is not
>
> > multihoming.multihoming is same port different IP addresses.Please
>
> > correct me......
>
> > regards.....
>
> > KK
>
> >
>
> > _______________________________________________
>
> > discussion mailing list
>
> > discussion AT sctp.de
>
> > http://www.sctp.de/mailman/listinfo/discussion
>
> _______________________________________________
>
> discussion mailing list
>
> discussion AT sctp.de
>
> http://www.sctp.de/mailman/listinfo/discussion
>
>
_______________________________________________
>
discussion mailing list
>
discussion AT sctp.de
>
http://www.sctp.de/mailman/listinfo/discussion
Archive powered by MHonArc 2.6.19+.