[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Fw: Can a daemon listen only on some interfaces?

On Sun, 09 Dec 2001, Guido Hennecke wrote:
> At 09.12.2001, Henrique de Moraes Holschuh wrote:
> > On Sun, 09 Dec 2001, Guido Hennecke wrote:
> > >  Gateway <your official ip address>   Interface <his
> > >         externel interface>
> > > 
> > > he can reach your service bound to And this without
> > > activating ip_forward on your computer!
> > Is this true even if the policy of the forward chain (for ipchains) is set
> > to deny ? (and the equivalent, for iptables) ?
> Those packets did not go throught the forwards chain. For local
> interfaces no routing is needed.

If they came over the network, they should have. That is a broken behaviour
(breaks principle of less surprise, at the very least).

Well, ipmasq needs an update to trash anything incoming and outgoing from
!lo with a destination of then.

  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh

Reply to: