Great Circle Associates Firewalls
(September 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: IP source routing RFC?
From: Donald . J . Smith @ aurora . cdev . com (Donald J Smith)
Organization: (unknown)
Date: 19 Sep 1995 10:29:00 -0700
To: alantec-mail-firewall @ paperboy . alantec . com
To: woods @ ncar . ucar . edu (Greg Woods)
Cc: firewalls @ greatcircle . com
Newsgroups: alantec.mail.firewall

>Anybody know the exact RFC in which IP source routing is defined?
>
>We've got a vendor who is offering to modify their kernel to provide
>a way for us to turn this off, but we have to point them to a specific
>definition of what IP source routing actually *is* before they can do this.
>
>--Greg
>
>

Did they offer to make this a base/supported modification in future releases? 
We were planning a "special release" os mod once, only to find out that we
would have to pay (a different amount) with each new os release or buy a 
source licence. Either of which is spelled "bring a basket of bucks".

Assumption:
If your turning off ip-source routing this must be a dual-homed-gateway.

It would probably cost less and be more effective to get a dual-homed
pentium and run TIS on linix. Then you can have the source. Assuming your
a c prgmer you can "fix" the kernal anyway you want. What do you loose?
Vendor support. What would you gain? An understanding at a os level of what
your dual homed gateway was doing with ip packets.
Donald J Smith 
Network Security Engineer @Computing Devices International

"@begin design in the security and ease_of_use != A*(1/Data_Security)"

(my opinions are mine and so are the spelling errors ;-)


Indexed By Date Previous: Re: IP source routing RFC?
From: bret @ real . com (Bret McDanel)
Next: Re: WordMacro.Nuclear virus
From: peter @ nmti . com (Peter da Silva)
Indexed By Thread Previous: Re: IP source routing RFC?
From: bret @ real . com (Bret McDanel)
Next: Re: IP source routing RFC?
From: bret @ real . com (Bret McDanel)

Google
 
Search Internet Search www.greatcircle.com