Re: [Freenet-dev] Gaping hole in FProxy: fix or wait.

[Brandon]

> I'm no expert on TCP/IP connections and such, but even if FProxy rejects
> all non-localhost connections, can the attacker still find out that
> there's something running on port 8080, and then portscan for the node?

Port 8080 is a normal port to run a web server on. So running FProxy on
port 8080 is not very suspicious.

> If so, we absolutely must randomize the fproxy listener port as well as
> the node port. Right?

This is probably a good idea anyway.



_______________________________________________
Freenet-dev mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/mailman/listinfo/freenet-dev