From owner-freebsd-questions Thu Sep 17 15:01:52 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id PAA17334 for freebsd-questions-outgoing; Thu, 17 Sep 1998 15:01:52 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from indigo.ie (ts02-011.dublin.indigo.ie [194.125.134.141]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA17128; Thu, 17 Sep 1998 15:00:42 -0700 (PDT) (envelope-from rotel@indigo.ie) Received: (from nsmart@localhost) by indigo.ie (8.8.8/8.8.7) id WAA01841; Thu, 17 Sep 1998 22:53:19 +0100 (IST) (envelope-from rotel@indigo.ie) From: Niall Smart Message-Id: <199809172153.WAA01841@indigo.ie> Date: Thu, 17 Sep 1998 22:53:19 +0000 In-Reply-To: <199809152109.OAA25292@usr09.primenet.com>; Terry Lambert Reply-To: rotel@indigo.ie X-Files: The truth is out there X-Mailer: Mail User's Shell (7.2.6 beta(3) 11/17/96) To: Terry Lambert , sthaug@nethelp.no Subject: Re: problem using 3 x znyx314 cards for 12 de ethernets Cc: hackers@FreeBSD.ORG, questions@FreeBSD.ORG Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sep 15, 9:09pm, Terry Lambert wrote: } Subject: Re: problem using 3 x znyx314 cards for 12 de ethernets > > > > I agree that this is the best place for it - but I'd also like FreeBSD > > systems to be secure against smurf attacks out of the box, even if the > > router/firewall/whatever lets IP broadcast through (and translates it > > to link-level broadcast). > > And what about NFS hijack, SMB hijack, source routing, IP spoofing, > etc.? These are different issues, someone can be partly responsible for a smurf attack without ever realising it and (more importantly) without _their_ security/quality of service being compromised. I don't care how many boxes get hacked as long as they aren't mine, but it's reasonable to complain about a configuration which makes it too easy for script kiddies to exploit the ineptitude or carelessness of admins to affect _other_ competant and careful admins boxes. It's akin to shipping sendmail with open relaying. Niall -- Niall Smart, rotel@indigo.ie. Amaze your friends and annoy your enemies: echo '#define if(x) if (!(x))' >> /usr/include/stdio.h To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message