Help with IP Filter 4.1.8
    Erik Norgaard 
    norgaard at locolomo.org
       
    Fri Mar 10 10:45:52 UTC 2006
    
    
  
Roman Serbski wrote:
>> 1) Other udp services, are responces also blocked? you can for example
>> try ntp. If so, then it is likely a bug in ip-filter.
> 
> Yes. Same for other udp (I tested with ntp). The symptoms are the same
> - there is a hit on a rule allowing outgoing ntp, but then reply is
> blocked.
It should be possible to capture on the interface in promiscuous mode. 
(I recall an article on SecurityFocus considering this as a security 
hole as it actually allows you to circumvent the firewall).
Cheers, Erik
    
    
More information about the freebsd-questions
mailing list