Patch for iptables (Linux firewall)

[Malcolm]

On 24/10/2007, Stefan Sperling <stsp at stsp.name> wrote:
> On Wed, Oct 24, 2007 at 09:58:26PM +0200, Stefan Sperling wrote:
> > No, and I was talking nonesense anyway since you cannot
> > spoof a TCP connection (which telnet requires).
> > You'd never get the ACK :)
>
> Mmmh on the other hand you might not care about the ACK.

You can open a TCP connection without receiving the ACK if you can reliably
guess the initial sequence number contained in the ACK.

Linux uses a good random number generator, so we're probably safe.

-- 
Malcolm Parsons