The remote host uses non-random IP IDs

ForumKid · 02-04-2002, 09:17 AM

I scanned my server and came up with this??? Im running RedHat 7.1. How do i fix this???? I have all the latest patches.
Thanks

Relative IP Identification number change
general/tcp

The remote host uses non-random IP IDs, that is, it is
possible to predict the next value of the ip_id field of
the ip packets sent by this host.

An attacker may use this feature to determine if the remote
host sent a packet in reply to another request. This may be
used for portscanning and other things.

unSpawn · 02-04-2002, 01:39 PM

IIRC, Solar Designer's OpenWall patch for kernels 2.2x has a randomizer, it's successor for kernels 2.4x, GRSecurity definately has. There's also Ippersonality kernel patch, which does tweakable packet mangling tru a new netfilter target, but I havent used Ipp.