Bugtraq mailing list archives

Re: ZoneAlarm


From: ah () SECURITYFOCUS COM (Alfred Huger)
Date: Mon, 24 Apr 2000 13:23:15 -0700


Additionally, using nmap's -f flag allows you to send traffic past
ZoneAlarm without any alerts.

I set up a copy on a local machine here and while I found that source port
scans from 67 slipped past the firewall -f seemed to be alerted on just
fine. Can anyone else comment to this?

Alfred Huger
VP of Engineering
SecurityFocus.com


Current thread: