From: Valdis.Kletnieks@vt.edu
To: Dave Taht <dave.taht@gmail.com>
Cc: "cerowrt-devel@lists.bufferbloat.net"
<cerowrt-devel@lists.bufferbloat.net>
Subject: Re: [Cerowrt-devel] Fwd: [uknof] CVE-2014-0160 mitigation using iptables
Date: Wed, 09 Apr 2014 11:41:20 -0400 [thread overview]
Message-ID: <47314.1397058080@turing-police.cc.vt.edu> (raw)
In-Reply-To: Your message of "Wed, 09 Apr 2014 08:18:23 -0700." <CAA93jw4YRcfmvrMzijGhDLr+A=CYO2i3Bqq8uATLka=Bgj_xHQ@mail.gmail.com>
[-- Attachment #1: Type: text/plain, Size: 454 bytes --]
On Wed, 09 Apr 2014 08:18:23 -0700, Dave Taht said:
> It is not clear if this could be used to protect things inside the
> firewall (switching to a forward rather than input table), nor if it
> could be used with ipv6.
It will require adjusting the 52= in the rule, but otherwise should be
OK for IPv6.
For that matter, the ruleset as given is probably busticated when IP or TCP
options are present, because it assumes a hard-coded offset.
[-- Attachment #2: Type: application/pgp-signature, Size: 848 bytes --]
prev parent reply other threads:[~2014-04-09 15:42 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <53453B13.8000705@ecsc.co.uk>
2014-04-09 15:18 ` Dave Taht
2014-04-09 15:41 ` Valdis.Kletnieks [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://lists.bufferbloat.net/postorius/lists/cerowrt-devel.lists.bufferbloat.net/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=47314.1397058080@turing-police.cc.vt.edu \
--to=valdis.kletnieks@vt.edu \
--cc=cerowrt-devel@lists.bufferbloat.net \
--cc=dave.taht@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox