Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 6 Sep 1998 12:10:48 +0200 (CEST)
From:      Hinrich Eilts <eilts@tor.muc.de>
To:        freebsd-questions@FreeBSD.ORG
Subject:   Re: bpfilter
Message-ID:  <199809061010.MAA25421@tor.muc.de>

next in thread | raw e-mail | index | archive | help

Hello,

for BPF you want

in kernel-config a line like
pseudo-device   bpfilter        4
and in /dev entries
bpf0
bpf1
...
(as much as the number (4) you selected in kernel-config).

Now, as root, a process may bind a bpf with e.g. an ethernet device and
read all ethernet packets, regardless of frame format and source. This may
be (ab)used for catching passwords send my clear text etc.

Hinrich

> In the FreeBSD handbook, there's a paragraph that talks about the bpfilter
> and how it can be a security risk to your network.  What are the security
> risks of running bpfilter, and how should I set it up?

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199809061010.MAA25421>