Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 5 Oct 2014 13:09:32 -0400
From:      el kalin <kalin@el.net>
To:        Brandon Vincent <Brandon.Vincent@asu.edu>
Cc:        freebsd-net <freebsd-net@freebsd.org>, freebsd-users@freebsd.org, freebsd-security@freebsd.org
Subject:   Re: remote host accepts loose source routed IP packets
Message-ID:  <CAMJXock7iYsh%2BMXMcxZjaTNg6cgm7g%2BHa4=ZQJqLq0DtzK5BWQ@mail.gmail.com>
In-Reply-To: <CAJm423-mFg%2BzU_RB%2Bkp8wmp-V31onJJV0K4FUOLcv%2BczAOCKXA@mail.gmail.com>
References:  <CAMJXoc=s=Ud52NJ0dbK-6qKEcszbni4bi1MA8mgRtQSo=2Uuyw@mail.gmail.com> <CAMJXoc=5gs17ZgQ7LYALwKFRPN5hQ38OOuBtDk=EjZzi82EFMA@mail.gmail.com> <CAMJXockiQ%2B0gFbxSY43OyMbNqTjdzR1i16w%2Byiqmm=cQ8HR=pQ@mail.gmail.com> <CAJm423-mFg%2BzU_RB%2Bkp8wmp-V31onJJV0K4FUOLcv%2BczAOCKXA@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
thanks brandon=E2=80=A6  but that didn't help=E2=80=A6.

i still get the same result=E2=80=A6

i guess i'd report this as a bug=E2=80=A6


On Sun, Oct 5, 2014 at 11:58 AM, Brandon Vincent <Brandon.Vincent@asu.edu>
wrote:

> On Sun, Oct 5, 2014 at 8:33 AM, el kalin <kalin@el.net> wrote:
> > should is submit this as a bug?
>
> Can you first try adding "set block-policy return" to pf.conf? OpenVAS
> might be assuming that a lack of response from your system to source
> routed packets is an acknowledgement that it is accepting them.
>
> Brandon Vincent
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAMJXock7iYsh%2BMXMcxZjaTNg6cgm7g%2BHa4=ZQJqLq0DtzK5BWQ>