From owner-freebsd-ipfw  Thu Feb 28  0:45: 4 2002
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mumba.junik.lv (mail.junik.lv [195.216.160.134])
	by hub.freebsd.org (Postfix) with ESMTP id 0CC6737B405
	for <freebsd-ipfw@freebsd.org>; Thu, 28 Feb 2002 00:44:54 -0800 (PST)
Received: (from root@localhost)
	by mumba.junik.lv (8.8.8/8.8.8) id KAA23154
	for freebsd-ipfw@freebsd.org; Thu, 28 Feb 2002 10:44:47 +0200
Received: from Adam ([213.182.205.3])
	by mumba.junik.lv (8.8.8/8.8.8) with SMTP id KAA23070
	for <freebsd-ipfw@freebsd.org>; Thu, 28 Feb 2002 10:44:42 +0200
Message-ID: <174101c1c034$87303380$03cdb6d5@junik.lv>
From: "Adam@junik.lv" <adam@junik.lv>
To: <freebsd-ipfw@freebsd.org>
Subject: pass tcp from any to any established
Date: Thu, 28 Feb 2002 10:47:17 +0200
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-ipfw@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-ipfw.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-ipfw>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-ipfw>
X-Loop: FreeBSD.ORG

Hi,
I would really appreciate it if you could cast some light upon this issue:

Is it at all possible that the ipfw rule:
ipfw add pass tcp from any to any established
can be abused by intruders?

Any input, no matter theoretical or real-life, will be
highly appreciated!

Many thanks in anticipation,
Adam






______________________________________
Scanned and protected by Inflex
http://pldaniels.com/inflex


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message