Re: First PDU of Login

[Luben Tuikov <luben@splentec.com>]

Pradeep Vincent wrote:
> 
> I think there was a discussion about this before.. Is it true that if the
> first PDU of the Login phase of a connection has an error the target should
> disconnect the connection.

Check the archives.

Since you say ``first PDU ... Login phase ... has an error'', I'd take
it you're saying *malformed* Login PDU, then *YES*, for security purposes,
DSA, etc, it would be wise for the target to not waste any resources
and close the connection immediately.

Else, it would be *really* easy to bring the target down via denial
of service attack... (out of sockets, etc...) 

OTOH, if the error is of logistical issue and a proper response is possible
(i.e. redirection), then you know what to do.

-- 
Luben