full-disclosure - Re: UDP bypassing in Kerio Firewall 2.1.4

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: k_aneda at yahoo.com (L. Walker)
Subject: Re: UDP bypassing in Kerio Firewall 2.1.4

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hey there David...

Concerning the Kerio Firewall "bug" you posted to full-disclosure,
its
more of a ruleset issue than a actual bug in the firewall itself.

If you want an example, search through for a bug in Norton Internet
Security, where you were able to do scans with specific TCP flags
set..

Nice of you to post though :)

- -- 
L. Walker
BOFH Excuse #385: Dyslexics retyping hosts file on servers
- -- 
If one wants to be a policeman, one must learn how to be a thief.
- --
That's why we spend so much time trying to understand our own
motivations
and those of others.  That's what makes life so interesting.
   Kaji, Evangelion Ep 18
- --

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3

iQA/AwUBProYtwSerGmLjhS4EQJhjwCeK2KtdoYLDYqiVOtRY2IEO5D1RHIAnRnN
usby1kQVbNiK0pIsnH1tNOG+
=UQF1
-----END PGP SIGNATURE-----