bugtraq - Re: Holes in the firewall of Mac OS X Leopard

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <6410B1D1-B496-4142-B60E-26008419188C@ece.cmu.edu>
Date: Mon, 29 Oct 2007 18:02:44 -0400
From: "Brandon S. Allbery KF8NH" <allbery@....cmu.edu>
To: Juergen Schmidt <ju@...sec.de>
Cc: bugtraq@...urityfocus.com,
	full-disclosure <full-disclosure@...ts.grok.org.uk>,
	vulnwatch@...nwatch.org
Subject: Re: Holes in the firewall of Mac OS X Leopard


On Oct 29, 2007, at 17:49 , Juergen Schmidt wrote:

> - if you set it to "Block all incoming connections" it still allows  
> access
> to certain system services. We could access the ntp daemon that is  
> running
> per default over the internet. In a LAN based scenario, we were  
> able to
> query the Netbios naming service even with full blocking enabled.

The firewall in Tiger, and presumably Leopard, only affects TCP  
services by default (you can enable UDP filtering in the Advanced  
settings).  So no change here from the status quo.

-- 
brandon s. allbery [solaris,freebsd,perl,pugs,haskell] allbery@...nh.com
system administrator [openafs,heimdal,too many hats] allbery@....cmu.edu
electrical and computer engineering, carnegie mellon university    KF8NH