Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 24 Jul 2000 23:34:56 GMT
From:      Salvo Bartolotta <bartequi@inwind.it>
To:        Richard Martin <dmartin@origen.com>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: Problems with natd and simple firewall
Message-ID:  <20000724.23345600@bartequi.ottodomain.org>
In-Reply-To: <397CCEAC.ECC9CCA6@origen.com>
References:  <Pine.BSF.4.21.0007241258250.24335-100000@snafu.adept.org> <397CCEAC.ECC9CCA6@origen.com>

index | next in thread | previous in thread | raw e-mail

>>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<<

On 7/25/00, 12:18:04 AM, Richard Martin <dmartin@origen.com> wrote 
regarding Re: Problems with natd and simple firewall:


> On the other hand, I do see packets hitting the other inbound RFC 1918 
filters
> from time to time.  Someone should have a talk with those routers...  
A low
> level concern, but still a concern


<ME TOO>I have regularly (maybe I should say "systematically") been 
logging RFC-1918-spoofed packets coming through my ISP in the past few 
months.</ME TOO>

I have also been using a closed (stateful) packet filter. 



Needless to say, I phoned my ISP "technicians", I also sent mail, but 
I still regularly see those packets almost every day. What's more, 
this is, er, a big national (!) ISP in my country.

The (IPv4) 'Net may be insecure by ... definition, but this kind of 
thoughtlessness seems to me even worse.  

Best regards,
Salvo





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000724.23345600>