From: gah@ugcs.caltech.edu   
      
   Rick Jones  wrote:   
      
   > glen herrmannsfeldt  wrote:   
   >> With clients on ephemeral ports, though, it takes a lot of   
   >> packets for a DoS attack.  Not so hard for NFS.  I am not   
   >> so sure what NFS/UDP does with a properly formatted reply   
   >> to a request that it didn't send.   
      
   > I believe there is a transaction ID in the RPC headers and if it does   
   > not match-up, I would certianly *expect* it to be dropped.   
      
   That makes sense.  There must be some way to match up reply   
   with request.  Port isn't an especially good choice, anyway.   
      
   -- glen   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)