From: m@rtij.nl.invlalid   
      
   On Thu, 09 Sep 2010 17:23:32 +0000, Rick Jones wrote:   
      
   > glen herrmannsfeldt  wrote:   
   >> With clients on ephemeral ports, though, it takes a lot of packets for   
   >> a DoS attack.  Not so hard for NFS.  I am not so sure what NFS/UDP does   
   >> with a properly formatted reply to a request that it didn't send.   
   >   
   > I believe there is a transaction ID in the RPC headers and if it does   
   > not match-up, I would certianly *expect* it to be dropped.   
      
   Yes, but that ID is *part* of the session identifier, (at least) the   
   source ip:port are used as well. Same holds for DNS, Ping and many others.   
      
   M4   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)