BB connection hijacking. Is it possible???

[AdyBee]

JustAnotherN00b has just had a go at me connection and my ping has reduced big time. I'll keep monitoring it and keep ya posted. Looking good though.

Originally Posted by ianathuth

Are you running any p2p applications when you are looking at your download performance?

[Ignition]

Originally Posted by Tricky

To an extent someone could highjack. "IP Spoofing" or SYN Flooding/DOS Attack is a fairly common method but not normally seen if you're fully patched up. Are you running any firewalls.

Check out Robin Walkers site for excellent trobleshooting tips : http://homepage.ntlworld.com/robin.d...ips/index.html

IP Spoofing is highly unlikely to be used on a cable modem user, and even then it wouldn't affect the user's download performance at all. It's a way of hijacking a user's legitimate session to get around filtering by source IP and unless the application is very weak it's very difficult.

Denial of service is equally unlikely, unless you've offended the wrong people there's no real reason why anyone'd be doing that.

Firewalls offer no protection at all against spoofing or denial of service unless they are hardware firewalls, and even then the main issue with a home connection is running out of bandwidth usually rather than the resource killing DoS attacks done on higher bandwidth boxes.

It's likely the same thing that was causing issues with pings, which should now be resolved

Cheers

[Pyromanic]

Originally Posted by JustAnotherN00b

IP Spoofing is highly unlikely to be used on a cable modem user, and even then it wouldn't affect the user's download performance at all. It's a way of hijacking a user's legitimate session to get around filtering by source IP and unless the application is very weak it's very difficult.

Denial of service is equally unlikely, unless you've offended the wrong people there's no real reason why anyone'd be doing that.

Firewalls offer no protection at all against spoofing or denial of service unless they are hardware firewalls, and even then the main issue with a home connection is running out of bandwidth usually rather than the resource killing DoS attacks done on higher bandwidth boxes.

It's likely the same thing that was causing issues with pings, which should now be resolved

Cheers

sygate firewall works against this, sucessfully ?

[Ignition]

Originally Posted by Pyromanic

sygate firewall works against this, sucessfully ?

What it stops someone saturating your bandwidth, and stops someone impersonating your TCP sequence and IP while DoS'ing you to steal a session?

If it does it's the only firewall in the world that can do all this, there is no firewall in existence that will prevent bandwidth being filled up, or the classic hijack attack. It is possible to prevent usage of all resources, this is done with either dedicated Layer 7 attack mitigation hardware or through ASIC based appliances utilising SYN cookies and broken packet filtering techniques such as boxes from Top Layer.

Sygate certainly does absolutely nothing against this.

[Pyromanic]

lol, fine. i just meant that it says it tries to stop ip and mac spoofing like is possible on linux