Messages in this thread | | | Date | Thu, 2 Apr 1998 23:29:53 +0200 (CEST) | From | Andreas Kostyrka <> | Subject | Re: Priviledged ports and masquerade |
| |
On Thu, 2 Apr 1998, Jason Venner wrote:
> > I can't rlogin/rsh through a masq server, the priviledged source port > gets mapped out of the priviledged range by the masquerade server. > > Is this worth fixing? This isn't really fixable. A connection coming from low ports is assumed to be coming from a root owned process on the connecting host. This is not the case in a ipmasqed connection.
Additionally this kind of authentification (rely upon IP address, portnum, and trust the client to tell us the real username), is basically broken. It should not be employed at all, and if it can't be avoided, than it should happen in the LAN. So most probably not trough a ipmasq gateway.
One should notice the deployment pattern. Probably most ipmasq'ed clients are some version of CrapOS, and reserved ports only matter to the rtools.
Andreas
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu
| |