Ryan Russell wrote:
> I guess I should have been more explicit..
> I mean, a source for the info about how FW1 first
> handled the OOB problem. I'm willing to believe
> that rlogin uses OOB, without looking at the code. :)
Interestingly, it appears that only the rlogin *client* receives OOB
data (sent from the rlogind server). This would preclude rlogin from OOB
attacks (unless you wanted to blow yourself up ;)
> avalon @
au on 10/29/97 04:00:33 PM
> To: Ryan Russell/SYBASE
> cc: proberts @
net, firewalls @
> Subject: Re: sex, lies, and firewall code
> In some mail from Ryan Russell, sie said:
> > I haven't been able to find a reference that indicates that
> > was the case. Any pointers?
> Can I suggest the rlogin/rlogind source code ?
Joe Loiacono (301) 415-6153
Computer Sciences Corporation http://www.csc.com