lkml.org 
[lkml]   [1998]   [Apr]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Priviledged ports and masquerade
On Thu, 2 Apr 1998, Jason Venner wrote:

>
> I can't rlogin/rsh through a masq server, the priviledged source port
> gets mapped out of the priviledged range by the masquerade server.
>
> Is this worth fixing?
This isn't really fixable. A connection coming from low ports is assumed
to be coming from a root owned process on the connecting host.
This is not the case in a ipmasqed connection.

Additionally this kind of authentification (rely upon IP address, portnum,
and trust the client to tell us the real username), is basically broken.
It should not be employed at all, and if it can't be avoided, than it
should happen in the LAN. So most probably not trough a ipmasq gateway.

One should notice the deployment pattern. Probably most ipmasq'ed clients
are some version of CrapOS, and reserved ports only matter to the rtools.

Andreas


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu

\
 
 \ /
  Last update: 2005-03-22 13:42    [W:0.045 / U:0.028 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site