From owner-freebsd-security@FreeBSD.ORG  Thu Sep 23 08:26:27 2004
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id B806C16A4CE
	for <freebsd-security@freebsd.org>;
	Thu, 23 Sep 2004 08:26:27 +0000 (GMT)
Received: from cleaton.net (cleaton.net [82.138.248.193])
	by mx1.FreeBSD.org (Postfix) with SMTP id E5A3B43D31
	for <freebsd-security@freebsd.org>;
	Thu, 23 Sep 2004 08:26:26 +0000 (GMT)
	(envelope-from nick@cleaton.net)
Received: (qmail 84930 invoked by uid 0); 23 Sep 2004 08:26:24 -0000
Received: from cleaton.net (HELO lt4.cleaton.net) (82.138.248.193)
  by cleaton.net with SMTP; 23 Sep 2004 08:26:24 -0000
Received: from nick by lt4.cleaton.net with local (Exim 4.30)
	id 1CAOyK-0000U8-0K; Thu, 23 Sep 2004 10:29:00 +0200
Date: Thu, 23 Sep 2004 10:28:59 +0200
From: Nick Cleaton <nick@cleaton.net>
To: Dag-Erling Smorgrav <des@des.no>
Message-ID: <20040923082859.GL5340@lt1.cleaton.net>
References: <20040923045229.GJ5340@lt1.cleaton.net>
	<20040923070809.14655.qmail@web51010.mail.yahoo.com>
	<20040923072912.GK5340@lt1.cleaton.net> <xzp1xgt5rv1.fsf@dwp.des.no>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <xzp1xgt5rv1.fsf@dwp.des.no>
User-Agent: Mutt/1.3.28i
cc: freebsd-security@freebsd.org
cc: Chris Ryan <chrisryanemail@yahoo.com.au>
Subject: Re: Attacks on ssh port
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 23 Sep 2004 08:26:27 -0000

On Thu, Sep 23, 2004 at 10:09:22AM +0200, Dag-Erling Smorgrav wrote:
> Nick Cleaton <nick@cleaton.net> writes:
> > I want access to my system from any IP address, so I've patched my
> > sshd so that a secret token is required to connect.
[...]
> Look up "replay attack" on google...

Indeed, this doesn't keep out attackers who can sniff a valid session,
just like tcp_wrappers doesn't keep out attackers who can spoof an
authorized source address.


Nick


-- 
$_='YN8KuE***  http://www.exonetric.com/  Telehouse UK colo  ***HARQr**'
.'NfzV0YrC1***     GBP40/month +VAT 40G BW no setup fee     ***MnjJ**'
.'6QvtcPgQ20***                                            ***nlS**'
;s/(.)(.*(.))/$2.chr(32+(ord($1)+ord$3)%89)/euntil/Foo/;eval#****'