Great Circle Associates Firewalls
(March 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Livingston FireWall Applications Note updated
From: Pete Shipley <shipley @ merde . dis . org>
Date: Thu, 30 Mar 1995 10:15:34 -0800
To: Darren Reed <avalon @ coombs . anu . edu . au>
Cc: cdr @ livingston . com, firewalls @ greatcircle . com, portmaster-users @ msen . com
In-reply-to: Your message of Thu, 30 Mar 1995 22:56:48 +1000. <199503301256 . EAA09714 @ merde . dis . org>

-----BEGIN PGP SIGNED MESSAGE-----


>> 
>> -----BEGIN PGP SIGNED MESSAGE-----
>[...]
>> Also you want to use resolv+ for the rebuilt shlib, this will give you
>> BIND 4.8.3, enhanced security in the form of a hostname spoofing check
>> from local hostnames.  plus the feature of being able to lookup
>> hostname from NIS, /etc/hosts and DNS in any order you choose.
>
>And start using 4.9.3 ASAP once released.
>
>[...]
>> 	echo "udp_cksum/W1" | /usr/bin/adb -wk /vmunix /dev/mem
>
>You're going to hate this, but this doesn't really solve much (when it
>comes to security).  All it does is stop bad (naturally) udp packets...
>generate a UDP packet and set the checksum to zero and no worries,
>mate...
>
>Darren.

True, but I figgure that it will not hurt. and as I said in the
original text "while we are at it".


-----BEGIN PGP SIGNATURE-----
Version: 2.6

iQBVAwUBL3r1Q3ynuL1gkffFAQHHbQH8CamMlsrMZNOS+R4K/fr/iAAi6M+4lYzZ
q37wzBJUsZOF5fLjCqsbYlsjf8kOFQQIWrZkyuA1hmnFXTXRDz2Nqg==
=0ieg
-----END PGP SIGNATURE-----


Indexed By Date Previous: Re: Alarms and paging
From: sdw @ lig . net
Next: Re: GE & Lessons Learned
From: rmck @ sandfiddler . paragon-systems . com (Bob McKisson)
Indexed By Thread Previous: Re: Livingston FireWall Applications Note updated
From: Pete Shipley <shipley @ merde . dis . org>
Next: Re: Livingston FireWall Applications Note updated
From: smb @ research . att . com

Google
 
Search Internet Search www.greatcircle.com