oss-security - Re: Attack on badly configured Netfilter-based firewalls

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 27 Feb 2012 12:42:35 +0100
From: yersinia <yersinia.spiros@...il.com>
To: oss-security@...ts.openwall.com
Subject: Re: Attack on badly configured Netfilter-based firewalls

On Sun, Feb 26, 2012 at 11:37 PM, Eric Leblond <eric@...it.org> wrote:

> Hello,
>
>
> This is a correct definition of the condition on the network required
> for the attack.
>
> Hi. If i have undestood correcly,  setting arp_announce and arp_ignore as
below should be fix the problem you have  described, isn't it ?

net.ipv4.conf.all.arp_announce=1
net.ipv4.conf.all.arp_ignore=2


We set so by default in our env by policy.

Thanks and Regards

Elia

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.