From owner-freebsd-hackers  Thu Jan 16 14:16:09 1997
Return-Path: <owner-hackers>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.4/8.8.4) id OAA17296
          for hackers-outgoing; Thu, 16 Jan 1997 14:16:09 -0800 (PST)
Received: from awfulhak.demon.co.uk (awfulhak.demon.co.uk [158.152.17.1])
          by freefall.freebsd.org (8.8.4/8.8.4) with ESMTP id OAA17272
          for <hackers@freebsd.org>; Thu, 16 Jan 1997 14:16:04 -0800 (PST)
Received: from awfulhak.demon.co.uk (localhost.coverform.lan [127.0.0.1]) by awfulhak.demon.co.uk (8.8.4/8.7.3) with ESMTP id VAA01349; Thu, 16 Jan 1997 21:05:35 GMT
Message-Id: <199701162105.VAA01349@awfulhak.demon.co.uk>
X-Mailer: exmh version 1.6.9 8/22/96
To: Eivind Eklund <eivind@dimaga.com>
cc: "Jordan K. Hubbard" <jkh@time.cdrom.com>,
        "Matthew A. Gessner" <mgessner@aristar.com>,
        hackers <hackers@freebsd.org>, cmott@srv.net
Subject: Re: IP aliasing on 2.1.5 or 2.1.6? 
In-reply-to: Your message of "Thu, 16 Jan 1997 19:28:52 +0100."
             <3.0.32.19970116192850.00a90ab0@dimaga.com> 
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Thu, 16 Jan 1997 21:05:35 +0000
From: Brian Somers <brian@awfulhak.demon.co.uk>
Sender: owner-hackers@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

> At 06:06 AM 1/16/97 -0800, Jordan K. Hubbard wrote:
> >> 	Steve Sims has been working on some documentation covering this, and he
> >> mentions this is only for 2.2+ releases.
> >
> >Steve's work (which just went into the tutorials section, BTW) covers
> >Charles Mott's extentions to ppp for IP aliasing.  I believe you can
> >get this version of ppp for 2.1.x as well, so that's probably not a
> >problem either.  Anyone got a pointer to the original version of this?
> 
> http://www.srv.net/~cmott/alias.html
> 
> However, this is based on 2.1.5 PPP, and has security holes.  I've made an
> update (after mailing with Charles Mott) which bring the base version to
> 2.1.6 with patches for all known holes.  This is available at
> 
> http://maybe.yes.no/perhaps/ppp+pktAlias1.8.tar.gz
> 
> I'll look at bringing mpd under control, too :)
> 
> Eivind Eklund / perhaps@yes.no / http://maybe.yes.no/perhaps/

I'm currently looking at ppp+pktAlias1.8 - with a view to merging it with the 
mpd code and replacing 'ppp' in -current.

What security holes were there ?

-- 
Brian <brian@awfulhak.demon.co.uk>, <brian@freebsd.org>
      <http://www.awfulhak.demon.co.uk/>
Don't _EVER_ lose your sense of humour....