From owner-freebsd-security Sun Aug 16 18:51:37 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id SAA22215 for freebsd-security-outgoing; Sun, 16 Aug 1998 18:51:37 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id SAA22208 for ; Sun, 16 Aug 1998 18:51:28 -0700 (PDT) (envelope-from jared@puck.nether.net) Received: (from jared@localhost) by puck.nether.net (8.9.0/8.7.3) id VAA03810; Sun, 16 Aug 1998 21:51:10 -0400 Message-ID: <19980816215110.B3703@puck.nether.net> Date: Sun, 16 Aug 1998 21:51:10 -0400 From: Jared Mauch To: Joao Paulo Campello Cc: security@FreeBSD.ORG Subject: Re: hosts.deny/allow & ICMP Attacks References: <3.0.5.32.19980728000808.007cb4f0@neoplanos.com.br> <199807281910.MAA01540@burka.rdy.com> <3.0.5.32.19980816210952.007c5b20@neoplanos.com.br> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.91.1i In-Reply-To: <3.0.5.32.19980816210952.007c5b20@neoplanos.com.br>; from Joao Paulo Campello on Sun, Aug 16, 1998 at 09:09:52PM -0300 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Sun, Aug 16, 1998 at 09:09:52PM -0300, Joao Paulo Campello wrote: > Does anybody here know if there's any way to break hosts.deny/allow > protection in BSD or even Linux Systems? Search the bugtraq archives, find out if you have the latest tcp_wrapper > So how can I filter in the router level, and be sure the PINGs will not > fill my incoming link? If your FreeBSD machine is your router, use IPFW. If not, contact your router vendor, Cisco, Bay, Lucent, whomever. We can't help you with your routers. (I'm sure that there are some people here that could, but you need to learn how to contact your router vendor, or a user-group that can help you with these types of things). - jared To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message