Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 25 Jul 2000 14:52:35 -0700 (PDT)
From:      Mike Hoskins <mike@adept.org>
To:        "Rodney W. Grimes" <freebsd@gndrsh.dnsmgr.net>
Cc:        Stephen Montgomery-Smith <stephen@math.missouri.edu>, freebsd-security@FreeBSD.ORG
Subject:   Re: Problems with natd and simple firewall
Message-ID:  <Pine.BSF.4.21.0007251450400.27924-100000@snafu.adept.org>
In-Reply-To: <200007252128.OAA52048@gndrsh.dnsmgr.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 25 Jul 2000, Rodney W. Grimes wrote:

> a)  The non-problem it attempts to solve can be handled by a correct
>     ipfw rule set.

Agreed.

> c)  It also totally ignores the fact that the problematic IP addresses
>     are much more than RFC1918 and include the following:
> 	0.0.0.0/8, 127.0.0.0/8, 192.0.2.0/24, 169.254.0.0/16, 240.0.0.0/4
>     that need to be dealt with properly and carefully at both interfaces
>     in a firewall.

Point taken, and agreed.

-mrh



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0007251450400.27924-100000>