Out of Band Packets
Results 1 to 4 of 4

Thread: Out of Band Packets

  1. #1
    Banned
    Join Date
    Jul 2002
    Posts
    9

    Out of Band Packets

    What is an OOB packet, how does one go about sending one, and how does one go about filtering them out of certain ports so as to stop from being a victim of a DoS Attack.

  2. #2
    Old-Fogey:Addicts founder Terr's Avatar
    Join Date
    Aug 2001
    Location
    Seattle, WA
    Posts
    2,007
    In the context that I think you're talking about...

    And OOB packet would just be a data chunk that is made in such a way that the recieving system goes 'oops' and messes up somehow due to a bug. If you're talking about a "Win-nuke" or something like that, it is largely fixed. It was basically sending data that the OS doesn't expect which causes a bug to occur which crashes the machine, it's nothing magic, just a mistake in the programming of the recieving machine so that it doesn't act correctly. You should be fine if you have updated Windows 95, 98, NT, 2k, ME, XP or some other OS.
    [HvC]Terr: L33T Technical Proficiency

  3. #3
    Senior Member
    Join Date
    Apr 2002
    Posts
    712

    Re: Out of Band Packets

    Originally posted here by terminalillness
    What is an OOB packet, how does one go about sending one, and how does one go about filtering them out of certain ports so as to stop from being a victim of a DoS Attack.
    OOB packets are sent by setting the OOB flag on the TCP packet - a few databases actually use(d?) them for conveying real data across a network. It was, at one point, an unhandled flag in MS' TCP stack and, as a result, crashed their systems. At this point, updating your system(s) with MS' current patches should be enough to fix the thing.

    Just block all unneeded ports and you should be fine (pretty much all inbound ports - there are some small exceptions to that if your firewall isn't stateful (like DNS/UDP, some high port UDP if you use traceroute, etc))
    \"Windows has detected that a gnat has farted in the general vicinity. You must reboot for changes to take affect. Reboot now?\"

  4. #4
    Junior Member
    Join Date
    Aug 2001
    Posts
    10

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •