Date: Fri, 21 Jan 2000 15:21:35 +1100 (Australia/NSW) From: Darren Reed <avalon@coombs.anu.edu.au> To: brett@lariat.org (Brett Glass) Cc: avalon@coombs.anu.edu.au (Darren Reed), imp@village.org (Warner Losh), jamiE@arpa.com (jamiE rishaw - master e*tard), tom@uniserve.com (Tom), mike@sentex.net (Mike Tancsa), freebsd-security@FreeBSD.ORG, freebsd-stable@FreeBSD.ORG Subject: Re: bugtraq posts: stream.c - new FreeBSD exploit? Message-ID: <200001210421.PAA25285@cairo.anu.edu.au> In-Reply-To: <4.2.2.20000120211801.01a4a4c0@localhost> from "Brett Glass" at Jan 20, 2000 09:18:51 PM
next in thread | previous in thread | raw e-mail | index | archive | help
In some mail from Brett Glass, sie said: > > At 06:48 PM 1/20/2000 , Darren Reed wrote: > > >If you are using ipnat and have ipfilter installed, the work around is > >as follows: > > I'm not very experienced with IPFilter, so this may be an "newbie" question, > but why is ipnat necessary? It isn't. I said that for people who are using ipnat but not ipfilter. btw, I think the better way to write the 3 rules is: block in quick proto tcp from any to any head 100 pass in quick proto tcp from any to any flags S keep state group 100 pass in all Darren To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200001210421.PAA25285>