<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1">
<title></title>
</head>
<body text="#000000" bgcolor="#ffffff">
Chris Muller wrote:<br>
<blockquote type="cite"
cite="mid20050808181840.47191.qmail@web52612.mail.yahoo.com">
<pre wrap="">Now that Magma has power-outage security, I'm designing security to protect
against hacking and would like to get feedback on the following approach.
Basically, I want to punish senders of invalid or forged transmissions by
blocking their IP for a period of time.</pre>
</blockquote>
[ snip ]<br>
<blockquote type="cite"
cite="mid20050808181840.47191.qmail@web52612.mail.yahoo.com">
<pre wrap="">On the server-side, an incorrect next-random results in punishment of that IP
(blockage for a period of time). On the client-side, an incorrect next-random
results in immediate disconnection from the server with a Warning signaled.
</pre>
</blockquote>
<span style="font-family: monospace;">Chris,<br>
<br>
Be careful with this strategy. Attackers might deliberately provoke the<br>
blocking behaviour with carefully crafted (mis)information to trigger a<br>
denial-of-service attack against your own perfectly valid IP addresses.<br>
<br>
I'm not saying you shouldn't do this, I'm just saying that it needs to
be<br>
rigourously thought through first.<br>
<br>
Andrew.<br>
</span>
</body>
</html>