Bugtraq: Linux +ipchains+ ping -R

[atodosic () UBISOFT QC CA (Andrej Todosic)]

Hello ,

i am not quite sure if this has been discussed or if htere is a fix already
but i d still like to mention it.

linux firewall setup 2.2.5 or 2.2.10 and ipchains + Nat + advanced router

if you are less than nine hops away from it ping -R and ( assuming the fw
lets the packets go through ) you get a kernel panic .

You cant go wrong . i tried it on more than one firewall and more than one
kernel.

PS if you are testing it do make sure you are not going through the fw for a
connection ( which how i screwed myself up and left the ping -R in the
background )

Andrej