[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: xinetd /etc/host.deny ALL:PARANOID



At 04:22 AM 1/11/02 +0100, martin f krafft wrote:
>a bogus IP won't even make it past OSI layer 4 on debian... rp_filter...

There are ways of doing it such that the box has NO WAY of knowing that the
traffic is spoofed.  Granted, that is hard to do.  Even paranoid lookups can
be overcome.  But it's just one more layer of defense and one more thing an
attacker has to contend with.


>interesting signature. serious or not?

But of course.


--
REMEMBER THE WORLD TRADE CENTER         ---=< WTC 911 >=--

00000100



Reply to: