Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 30 Jul 1998 20:04:39 -0400 (EDT)
From:      wietse@porcupine.org (Wietse Venema)
To:        efb@cotdazr.org
Cc:        security@FreeBSD.ORG
Subject:   Re: PPP.3000.exposure
Message-ID:  <19980731000439.4580B7036A@spike.porcupine.org>
In-Reply-To: <19980730213629.6026.qmail@cotdazr.org> from "efb@cotdazr.org" at "Jul 30, 98 09:36:29 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
efb@cotdazr.org:
> 
> Had a random sweep and the question came up .. what and why does my
> port 3000 show to the world outside for .. can I block it .. should I
> sweat it .. the F.Bsd_205 box is the router as well as main server ..
> 
> Can I Wrap the 3000 at least so as not to kill iijppp and reduce my
> exposure and how ???

This is one feature of the ppp daemon that I didn't like at all.
To block, you'd need a kernel-based packet filter; or hack the
source and rip out the 

    if (server > 0) FD_SET(server, &rfds);

line. Beware, this is untested advice.

	Wietse

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19980731000439.4580B7036A>