> > Is this a no-brainer, and one should definitely turn it OFF, or is the only
> > security problem that another host can masquerade in pings or traceroutes?
>
> Turn it off on your firewall. Pass no source routed packets, period,
> or you might find all sorts of very evil attacks being
> perpetrated. Indeed, turn it off anywhere you can -- internally if you
> can manage it.
I am wondering if there is a test to remotely see if IP Forwarding is
turned on a host? Like if I admin a large network and there are
several nets within mine in different departments, and I want to see
if a particular machine has IP Forwarding, I am wondering would there
be a good way to remotely bounce a packet that would check for ip-forwarding
or not?
--
Christopher William Klaus
Internet: gt6468c @
prism .
gatech .
edu coup @
gnu .
ai .
mit .
edu cklaus @
hotsun .
nersc .
gov
26468 GaTech Station, Atlanta Georgia, 30332 (404)-206-1513
Follow-Ups:
References:
|
|
