Reply to: RE>source routing
tdolce @
dino .
leg .
ca .
gov (Tom Dolce) writes:
# I've heard that source routing is dangerous security-wise. Can
# someone please explain what it is and why it's dangerous? Thanks.
brent @
GreatCircle .
COM (Brent Chapman) writes:
>Source routing is not that dangerous in and of itself. The problem
>is, some "routers" (generally UNIX machines with multiple interfaces,
>not dedicated boxes specificly designed to be routers) will always
>forward source-routed packets, even if IP forwarding (normal routing)
>is supposedly turned off.
I have also heard that some earlier router software suffered from the same
disease. Could you summarize which UNIX OS and versions have the problem, as
well as any known patches?
Follow-Ups:
|
|
