Date: Sun, 14 Mar 1999 16:24:19 +0200 From: Ruslan Ermilov <ru@ucb.crimea.ua> To: dg@freebsd.org Cc: hackers@freebsd.org Subject: Re: ipflow and ipfirewall Message-ID: <19990314162419.A10242@relay.ucb.crimea.ua> In-Reply-To: <199903131819.TAA29395@rt2.synx.com>; from Remy Nonnenmacher on Sat, Mar 13, 1999 at 07:11:19PM %2B0100 References: <19990313200150.A83040@relay.ucb.crimea.ua> <199903131819.TAA29395@rt2.synx.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Mar 13, 1999 at 07:11:19PM +0100, Remy Nonnenmacher wrote: > On 13 Mar, Ruslan Ermilov wrote: > > Hi! > > > > I thought about starting to use fast IP forwarding, but... > > > > It seems that such "fast forwardable" packets, when passed from > > ether_input(), for example, just simply bypass all firewall checks. > > > > Am I right? > > > > you are. > It's a big security leak... David, was it supposed by design (that such packets bypass firewall)? -- Ruslan Ermilov Sysadmin and DBA of the ru@ucb.crimea.ua United Commercial Bank +380.652.247.647 Simferopol, Ukraine http://www.FreeBSD.org The Power To Serve http://www.oracle.com Enabling The Information Age To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990314162419.A10242>