Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search
 

jtuck004

(15,882 posts)
Fri Jan 17, 2014, 07:33 PM Jan 2014

If one is hacking on the Internet, they want to make sure they are RFC 3514 compliant,


so their traffic gets through. Many novice hackers, or people simply learning about this to protect themselves, are not aware of this protocol, and may in fact find their packets dropped if not properly formatted, and thus a waste of their time.

Here's a link...http://www.ietf.org/rfc/rfc3514.txt

and a blurb...

1. Introduction

Firewalls [CBR03], packet filters, intrusion detection systems, and
the like often have difficulty distinguishing between packets that
have malicious intent and those that are merely unusual. The problem
is that making such determinations is hard. To solve this problem,
we define a security flag, known as the "evil" bit, in the IPv4
[RFC791] header. Benign packets have this bit set to 0; those that
are used for an attack will have the bit set to 1
...

More at link.
3 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
If one is hacking on the Internet, they want to make sure they are RFC 3514 compliant, (Original Post) jtuck004 Jan 2014 OP
who would have guessed ProdigalJunkMail Jan 2014 #1
LOL, thanks for this! PrestonLocke Jan 2014 #2
DD-WRT and Tomato have a patch that offers RFC3514 config ChromeFoundry Jan 2014 #3

ProdigalJunkMail

(12,017 posts)
1. who would have guessed
Fri Jan 17, 2014, 07:54 PM
Jan 2014

that all the way back on April 1, 2003 they would have this awesome technology to protect us?

sP

PrestonLocke

(217 posts)
2. LOL, thanks for this!
Fri Jan 17, 2014, 10:33 PM
Jan 2014

Almost every time my connection drops, it's because I forgot to set the evil bit in my router. Damn thing keeps resetting.





ChromeFoundry

(3,270 posts)
3. DD-WRT and Tomato have a patch that offers RFC3514 config
Fri Jan 17, 2014, 11:50 PM
Jan 2014

You can even configure your VLANs and WLANs on separate virtual interfaces, allowing you to set each to EVL-Bit = (on/off). However, there is a bug report on VPN tunneling through TOR that is expected to be fixed very soon. The workaround is to set your default EVL-Bit to 0x1.

Latest Discussions»Help & Search»Computer Help and Support»If one is hacking on the ...