In your message of Thu, 04 Aug 1994 08:47:07 BST, you say:
>> This strikes me as being a bit on the scary side. Do we really want all the
>> users of NetBSD telnet to have the ability to source route without so much
>> as a recompile?
>What is the big threat in a source-routed telnet?
>It is quite easy to write source routed apps for BSD based systems
>so even if telnet didnt support source-routing it could easily be
>added. At least NetBSD's rlogind will drop all connections that
>are using source routing which is better than I can say for most
>rlogind's.
By the way, wzv's TCP wrapper will drop source routed packets by
default (ie, if KILL_IP_OPTIONS is defined).
Other daemon writers should snarf the relevant code, imho;
it's only 10 lines or so.
--j.
References:
|
|
