Hugo wrote:
> 
> I confiugured firewall (CP 4.1) not to control ip routing, meaning when
> firewall is dropped then it is still routing thwe packets. Frewall protexts
> hosts that have public ip range, LAN and DMZ. Let's say firewall service
> crashes but machine still works and can route the packets, so my networks
> (10.0.0.0/16 and 192.168.99.0/24) are exposed.
> Question: I think that even if fw service is down then nothing will happen
> cause you cannot attack hosts with illegeal ip addresses-they simply won't
> be routed back to attacker....but maybe I'm wrong here...I would like to
> have some feedback on this.

Step 1: Take control of machine with public IP
(Step 2: Alter routing table of said machine if necessary)
Step 3: Attack machine with private IP
Step 4: Steal all socks  [1]
Step 5: (undecided as of yet)
Step 6: Make lots of money

-- 
Mikael Olsson, Clavister AB
Storgatan 12, Box 393, SE-891 28 �RNSK�LDSVIK, Sweden
Phone: +46 (0)660 29 92 00   Mobile: +46 (0)70 26 222 05
Fax: +46 (0)660 122 50       WWW: http://www.clavister.com

[1] From dumb TV show that I won't publicly admit to watching :)
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
For Account Management (unsubscribe, get/change password, etc) Please go to:
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to