Stilgherrian wrote:
> 
> At some point, run the following command:
>   /sbin/insmod ip_masq_ftp

And in doing so, you open yourself up to the FTP ALG data channel
vulnerabilities resulting in anyone from the outside being able
to connect to any host and any port on the inside of the firewall.

$.02

-- 
Mikael Olsson, EnterNet Sweden AB, Box 393, SE-891 28 �RNSK�LDSVIK
Phone: +46-(0)660-29 92 00         Fax: +46-(0)660-122 50
Mobile: +46-(0)70-66 77 636
WWW: http://www.enternet.se        E-mail: [EMAIL PROTECTED]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to