Skip site navigation (1)Skip section navigation (2)
Date:      19 Jun 2000 13:04:20 +0200
From:      Roland Jesse <jesse@mail.CS.Uni-Magdeburg.De>
To:        freebsd-stable@freebsd.org
Subject:   hosts.allow: deny set but ping requests come through
Message-ID:  <0v66r6gcej.fsf@cs.uni-magdeburg.de>

next in thread | raw e-mail | index | archive | help
The first two lines of my /etc/hosts.allow are as follows:

ALL : PARANOID : RFC931 20 : deny
ALL : general.URZ.Uni-Magdeburg.DE 141.44.2.1 : deny

The second one is there to prevent ping requests from the specified
machine to mine without a need to set up a firewall.

Using "tcpdump -a -i tx0 host arthur.cs.uni-magdeburg.de | grep general" 
I still get the following:

tcpdump: listening on tx0
12:53:38.083288 general.URZ.Uni-Magdeburg.DE > arthur.CS.Uni-Magdeburg.De: icmp: echo request
12:53:38.083316 arthur.CS.Uni-Magdeburg.De > general.URZ.Uni-Magdeburg.DE: icmp: echo reply

As I understand it that should not happen as the above deny rule
doesn't allow *any* access from this general machine. My machine is
-stable as of early June:

% uname -a
FreeBSD arthur.cs.uni-magdeburg.de 4.0-STABLE FreeBSD 4.0-STABLE #12: Sat Jun 10 18:10:53 CEST 2000     root@arthur.cs.uni-magdeburg.de:/usr/src/sys/compile/ARTHUR  i386

        Roland


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?0v66r6gcej.fsf>