Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: [LINUX] IP_MASQ / Ethernet Passing Traffic After Halt
From: alan () LXORGUK UKUU ORG UK (Alan Cox)
Date: Sun, 13 Apr 1997 14:34:57 +0100


 the IP Masquerade gateway to an external host and the Ethernet interfaces
 inside the machine are still being supplied power, that connection will
 stay online in a fully interactive state.

Actually this is a feature. You can reboot a machine and not lose most
masqueraded connections. The Linux halt halts userspace. If you want to
down the network interfaces stick it in the rc files.

I'd suggest people under attack pull out cables anyway - you don't know
what your compromised machine is also doing or if "halt" is now a member of
rootkit.

Alan



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault