Hi,

I've seen https://bugs.freenetproject.org/view.php?id=351 in the
bugtracker :

 0000351: fproxy does not correctly block connections from addresses not
 in fproxy.allowedHosts

atm, we do accept() on the socket and close it if the host isn't in the
allowedHosts list... The only way of preemptively rejecting it would be
to use the SecurityManager...

Do we want to dig into it and deal with it ?

NextGen$
PS: the security manager has policies that can be overriden by local
settings and it usage WILL lead to problem and missunderstanding when
supporting some users... 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: 
<https://emu.freenetproject.org/pipermail/devl/attachments/20060513/952c2cba/attachment.pgp>

Reply via email to