snort IDS protection bypass

Packet's fragments with significant TTL difference are ignored...

PT-2002-1566 · Ipfilter · Ipfilter

Name of the Vulnerable Software and Affected Versions: IPFilter versions 3.4.25 and earlier Description: The issue allows remote attackers to identify filtered ports by comparing TTLs, as IPFilter sets a different TTL when a port is being filtered than when it is not being filtered...