Date: Thu, 29 Sep 2016 14:47:55 +0200 From: "O. Hartmann" <ohartman@zedat.fu-berlin.de> To: FreeBSD CURRENT <freebsd-current@freebsd.org>, freebsd-security@freebsd.org Subject: IPFW on CURRENT: NAT forwarding exposes internal IP! Message-ID: <20160929144755.2e4f7800.ohartman@zedat.fu-berlin.de>
next in thread | raw e-mail | index | archive | help
LS0tLS1CRUdJTiBQR1AgU0lHTkVEIE1FU1NBR0UtLS0tLQ0KSGFzaDogU0hBMjU2DQoNCg0KRGVz cGl0ZSBvdGhlciBwcm9ibGVtcyB3aXRoIElQRlcgYW5kIGl0cyBkb2N1bWVudGF0aW9uIHJlZ2Fy ZGluZyBOQVQsIEkgZmFjZSBhIHNlcmlvdXMNCmFuZCBkaXN0dXJiaW5nIHByb2JsZW0uDQoNCkkg cnVuIGEgTmFub0JTRCBiYXNlZCByb3V0ZXIvZmlyZXdhbGwgcHJvamVjdCBvZiBteSBvd24sIHJ1 bm5pbmcgQ1VSUkVOVCAoRnJlZUJTRA0KMTIuMC1DVVJSRU5UICMxIHIzMDYzMzM6IE1vbiBTZXAg MjYgMDg6MzY6MDIgQ0VTVCAyMDE2KS4gSVBGVyBpcyB0aGUgZmlsdGVyIG9mIG15IGNob2ljZSwN CnNpbmNlIGl0IGlzIEZyZWVCU0QncyBuYXRpdmUuIEkgYWxzbyB1c2UgSW4ta2VybmVsLU5BVCBh cyB3ZWxsIGFzIHBwcG9lZC9wcHAuIFRoZSBtb2RlbQ0KaXMgY29ubmVjdGVkIHRvIGEgZGVkaWNh dGVkIE5JQywgdGhlIHBwcG9lLXRyYWZmaWMgaXMgdHJhbnNwb3J0ZWQgdmlhIHR1bjAgLSBJIHRo aW5rIHRoaXMNCmlzIHRoZSB1c3VhbCBzdHVmZi4NCg0KVGhlIElQRlcgaGFzIHRoaXMgTkFUIHJ1 bGU6DQoNCiR7ZndjbWR9ICAgICAgICBuYXQgMSBjb25maWcgaWYgJHtpZl9pc3AwfSBcDQogICAg ICAgICAgICAgICAgICAgICAgICBsb2cgXA0KICAgICAgICAgICAgICAgICAgICAgICAgcmVzZXQg XA0KICAgICAgICAgICAgICAgICAgICAgICAgc2FtZV9wb3J0cyBcDQogICAgICAgICAgICAgICAg ICAgICAgICByZWRpcmVjdF9wb3J0IHRjcCAke3NlcnZlcl9nYXRlfToyMiAyMiBcDQogICAgICAg ICAgICAgICAgICAgICAgICByZWRpcmVjdF9wb3J0IHRjcCAke3NlcnZlcl93d3d9OjgwIDgwIFwN CiAgICAgICAgICAgICAgICAgICAgICAgIHJlZGlyZWN0X3BvcnQgdGNwICR7c2VydmVyX3d3d306 NDQzIDQ0MyBcDQogICAgICAgICAgICAgICAgICAgICAgICByZWRpcmVjdF9wb3J0IHRjcCAke3Nl cnZlcl9yZWZkYn06OTczNCA5NzM0DQoNCnNlcnZlcl93d3cgaXMgYXNzaWduZWQgdG8gYSBub24t b2ZmaWNpYWwgSVAsIDE5Mi4xNjguMTAuMTAuDQoNCmlmX2lzcD10dW4wLCB0dW4wJ3MgSVAgaXMg Z2l2ZW4gYnkgdGhlIHByb3ZpZGVyLCBJIHVzZSBuZXQvZGRjbGllbnQgYXMgdGhlIHVwZGF0ZXIg Zm9yIGENCmR5bmFtaWMgRE5TIGFjY291bnQuDQoNCkkgdXNlIGFuIGludGVybmFsIEROUyBzZXJ2 ZXIsIHdoaWNoIHJlc29sdmVzIDkyLjE2OC4xMC4xMCB0byBhIGNlcnRhaW4gbmFtZS4gSSBhbHNv IHVzZQ0Kc2VsZiBzaWduZWQgU1NMIGNlcnRpY2F0ZXMsIGp1c3QgZm9yIGNvbXBsZXRlbmVzcyBv ZiB0aGlzIGluZm9ybWF0aW9uLg0KDQpDb25uZWN0aW5nIGZyb20gdGhlIG91dHNpZGUgd29ybGQg dG8gbXkgZHluRE5TIGRvbWFpbiB0cmlnZ2VycyBGaXJlZm94IG9yIGFueSBvdGhlcg0KYnJvd3Nl ciB0byBjb21wYWxpbiBhYm91dCB0aGUgc2VsZiBzaWduZWQgU1NMIGNlcnRpZmljYXRlIC0gYXMg dXN1YWwsIGJ1dCB0aGVuLCBhZGRpbmcNCml0LCBzdWRkZW5seSB0aGUgZG9tYWluIG5hbWUgKHNh eTogd3d3LmJsYWJsYS5vcmcpIGlzIHJlcGxhY2VkIGJ5IHRoZSBpbnRlcm5hbCBJUCBJDQpkZWxl Z2F0ZSBhbnkgYWNjZXNzIG9uIHBvcnRzIDgwIGFuZCA0NDMgdG8uDQoNCldoYXQgaGFwcGVucyBo ZXJlPyBJIGNvbnNpZGVyIHRoaXMgYSBidWcsIEkgbmV2ZXIgc2F3IHRoaXMgb24gb3VyIExpbnV4 IHNlcnZlcnMgcnVubmluZyBhDQpzaW1pbGFyIHNldHVwIChmb3J3YXJkaW5nLCBCSU5EIDkuMTAv QklORCA5LjExKS4NCg0KVGhhbmtzLA0KDQpPbGl2ZXINCi0tLS0tQkVHSU4gUEdQIFNJR05BVFVS RS0tLS0tDQpWZXJzaW9uOiBHbnVQRyB2Mg0KDQppUUVjQkFFQkNBQUdCUUpYN1ExN0FBb0pFT2dC Y0Q3QS81Tjg4eUFIL1JaTFVSUWJDNUxUZ0pEL05VZEU1MUYzDQp5UFZhVVFJYWVHbTkzZHU4N0sy b3BYczNETnRNcjBtMVNJMXdRWmRPQVFEbDN5cU1rejliWDlWVFV3ZXVBbHRwDQpaY0J4aFoyVkFD UUpDdS9Bc1lJV1dXcDZybGluaXlaV01yK1RPeU50VER4ZFBySVhZendlZlgrZllOK1V5LzA0DQo5 UGFsZmNUL1MrOXE1REtkN3NtN0s2THFzVTBISjlHcEtnTm5zeXFXRUFXdk9SZ3hVdktTM0dTOWpF anhVbnJEDQoyMHlUWGp5aXUwbVM4VVlMUzdEYnJyZ0l0ZzNmWEVKVkc4MTg4dHdlRkI1YWFsUVJI Nm95TkdheFdsR2FGOFJjDQpLOXQ0Nzl2Nk9XM1hDczlGaUc2QXRDenBtblVrQ29NdHhsN2xZM2hQ VS9TaDFQNWVwWXUyNmJkb0YyZWNyMWc9DQo9b01HTA0KLS0tLS1FTkQgUEdQIFNJR05BVFVSRS0t LS0tDQo=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20160929144755.2e4f7800.ohartman>