[prev in list] [next in list] [prev in thread] [next in thread] 

List:       firewalls-gc
Subject:    RE: Embedded IP packets within IP
From:       Manuel.Gil () gecits-eu ! com
Date:       1998-11-30 9:41:23
[Download RAW message or body]

[To unsubscribe, send mail to majordomo@lists.gnac.net with
"unsubscribe firewalls" in the body of the message.]
-




I think that yes. If you let go throught your Firewalls this kind of
packets, the real port destination is unknown for the Firewall so could be
an attack for you destination machine.

Best regards






cs.law@amd.com on 27/11/98 01:12:30

To:     Manuel Gil/Madrid/GECITS-EU, leonard@geminisecure.com
cc:     tally_jones@yahoo.com, Firewalls@lists.gnac.net
Subject:  RE: Embedded IP packets within IP
                                                                           
                                                                           
 ------------------------------------------------------------------------- 





So,
What are the consequences if Firewall over look this kind of packet?
Will it be a open hole for hacker?
Thanks, Rgds CS
> -----Original Message-----
> From:   Manuel.Gil@gecits-eu.com [SMTP:Manuel.Gil@gecits-eu.com]
> Sent:   Thursday, November 26, 1998 6:22 PM
> To:     leonard@geminisecure.com
> Cc:     tally_jones@yahoo.com; Firewalls@lists.gnac.net
> Subject:     Re: Embedded IP packets within IP
>
> [To unsubscribe, send mail to majordomo@lists.gnac.net with
> "unsubscribe firewalls" in the body of the message.]
> -
>
>
>
>
> I think that Tally want to know if any firewall could scan dangers IP
> packets embedded in another IP packets like Multicast or Mbone.
>
> Like everybody know, Mbone is dangerous for this feature, if you let
> go
> throught your Firewall Mbone packets, really you don't know the
> destination
> port numbers included in the packets.
>
> Isnt true?
>
> Best regards
>
> Manuel Gil
> GE Capital IT Solutions , S.L.
> System Engineering
> Edif. Torre Serrano
> C./ Serrano 47, Madrid 28001, Spain
> Phone: +34 91 4368838/00, Fax: +34 91 5769883, Mobile: 909 457616
> Internet: Manuel.Gil@GECITS-EU.COM
>

[prev in list] [next in list] [prev in thread] [next in thread]