full-disclosure - Lets discuss, Firewalls...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <91399b85fab2185a4bcb2d966ed53d35@venom600.org>
From: lists at venom600.org (Ben Nelson)
Subject: Lets discuss, Firewalls...

On August 29, 9:33 pm "Mike @ Suzzal.net" <mike@...zal.net> wrote:
>
> Can you get to it? How?

Possibly.  Source routed packets.

>
> Do you still need a firewall? Why?
>

Yes. To block source routed packets. There may be a registry setting to not
accept source routed packets on windows...I'm not sure.  On linux you'd:
echo 0 > /proc/sys/net/ipv4/conf/<interface>/accept_source_route

Do that once for each interface on your box.

Another reason to have a firewall is to limit outbound traffic.  Say you
click on an email file attachment ( i.e. a really 'wicked' screensaver ;)
and your box gets infected with some worm.  Do you really want your box to
be able to advertise to the world that it's infected....and possibly infect
other boxes?

--Ben