Re: Trust an IP? (IPTables)

On Thu, 1 May 2003, David Lang wrote:

> the fundamental problem with the r* tools wasn't trusting an IP address,
> it was trusting a 'root' source port.

Actually, there's a good argument to be made that the issue was trusting a
host well enough to allow login without additional credentials. Coupled
with the fact that such trust is extended by addign a simple text file to
a user's home directory, and things get ugly pretty quickly.

Paul
-----------------------------------------------------------------------------
Paul D. Robertson "My statements in this message are personal opinions
proberts_at_patriot.net which may have no basis whatsoever in fact."
probertson_at_trusecure.com Director of Risk Assessment TruSecure Corporation

_______________________________________________
firewall-wizards mailing list
firewall-wizards_at_honor.icsalabs.com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
Received on May 01 2003