lkml.org 
[lkml]   [1999]   [Sep]   [14]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRE: netfilter plugin: antispoof
Date
> Hi rusty,
>
> I think I just came up with a rather fun idea for a
> netfilter plugin.
>
> Basically, it terminates IP connections that it doesn't
> know of.

don't really understand. Either you accept an IP packet based on it's src
address or not, or allow a tcp connection to be made or not. Why in the case
of a tcp connection, break a connection? The IP address won't change.. if it
does it's not part of the same connection.

And if the IP address is spoofed you can't really know unless it's on the
same network as you. And anyway you should have your router disallow local
network IP's coming in from external net's anyway.

confused,

Paul Jakma.


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:53    [W:0.145 / U:0.212 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site