full-disclosure - NetGear VFS/VFM 318 ProSafe Firewall/VPN issue?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: DARREN.L.BENNETT at saic.com (Darren Bennett)
Subject: NetGear VFS/VFM 318 ProSafe Firewall/VPN issue?

When using a NetGear VFS318/VFM318 ProSafe Firewall/VPN. It was possible
to connect to the device from a system by specifying the gateway and an
IP in the same subnet. Mac address filtering was supposedly "on" but by
connecting first with a statically specified IP address and then
reconnecting with the same system via DHCP, the device accepted the
connection (even though it's mac address was not in the "allowed" list).
At that point, access was allowed to systems beyond the firewall/vpn.
I'm not sure if that is "normal" behavior or not... are there known
issues with these devices? Was is a misconfiguration on my part?

	-Darren

-- 
-----------------------------------------------
Darren Bennett - CISSP
Sr. Systems Administrator/Manager
Science Applications International Corporation
Advanced Systems Development and Integration
-----------------------------------------------

"Opportunity is missed by most people because it is dressed in overalls
and looks like work." - Thomas A. Edison