From owner-freebsd-stable Sun Feb 11 11:31:25 2001 Delivered-To: freebsd-stable@freebsd.org Received: from level3.dynacom.net (level3.dynacom.net [206.107.213.213]) by hub.freebsd.org (Postfix) with SMTP id 821C237B401 for ; Sun, 11 Feb 2001 11:31:20 -0800 (PST) Received: (qmail 5619 invoked by uid 0); 11 Feb 2001 19:31:19 -0000 Received: from dsl1-160.dynacom.net (HELO urx.com) (206.159.132.160) by mail.urx.com with SMTP; 11 Feb 2001 19:31:19 -0000 Message-ID: <3A86E888.832840FC@urx.com> Date: Sun, 11 Feb 2001 11:31:20 -0800 From: Kent Stewart Reply-To: kstewart@urx.com Organization: Dynacom X-Mailer: Mozilla 4.76 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: Warner Losh Cc: Andrew Gordon , FreeBSD Subject: Re: 4.0 Release -> 4.2-Stable should be ok ? via cvsup ? References: <200102111612.f1BGCuE03386@billy-club.village.org> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Warner Losh wrote: > > In message Andrew Gordon writes: > : I hope that's _late_ Feb 4th sources if your firewall uses ipfw: ipfw was > : substantially broken from 2001/02/01 20:25:09 to 2001/02/04 05:48:59 > : (/sys/netinet/ip_fw.c rev 1.131.2.13 is the bad version). > : > : We were upgrading our firewall around that time and were dismayed to find > : it wide-open after the upgrade! > > Yes. Since I'm on the security-officer's list still, I had planned > the upgrade for a day earlier, but put things off until the fixes were > committed. Thanks for this thread because of it, I found that I could telnet in from the outside world. Something that was supposed to be completely turned off. I was still logging the activity but was really kind of shocked. Kent > > Warner > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-stable" in the body of the message -- Kent Stewart Richland, WA mailto:kbstew99@hotmail.com http://kstewart.urx.com/kstewart/index.html FreeBSD News http://daily.daemonnews.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message