Firewall Wizards mailing list archives

Re: Buffer Overruns

From: "Saravana Ram" <Ram () POP Jaring My>
Date: Fri, 24 Dec 1999 11:37:32 +0800

Is it possible to perform this level of filtering using IPCHAINS?


No, Michael.

IPChains can only filter based on the contents of the IP packet headers,
that is destination/originating IP address, port, flags, etc.

Only an application-layer proxy that performs statefull inspection can block
out http requests to applets.

Current thread:

Buffer Overruns Michael Kelly (Dec 17)
- Re: Buffer Overruns Joseph S D Yao (Dec 18)
- Re: Buffer Overruns Marcus J. Ranum (Dec 18)
- Re: Buffer Overruns Crispin Cowan (Dec 18)
  - Re: Buffer Overruns Michael Kelly (Dec 20)
- Re: Buffer Overruns Matt Curtin (Dec 18)
  - Re: Buffer Overruns Frederick M Avolio (Dec 20)
    - RE: Buffer Overruns Michael D. Hunter-Linville (Dec 21)
    - Re: Buffer Overruns Saravana Ram (Dec 24)
- <Possible follow-ups>
- Re: Buffer Overruns Ryan Russell (Dec 18)
- Re: Buffer Overruns Steven M. Bellovin (Dec 18)
- Re: Buffer Overruns Vin McLellan (Dec 20)
  - Re: Buffer Overruns Joseph S D Yao (Dec 21)
    - OT - Rant on State of S/w Engr (was Re: Buffer Overruns) Lim Wei Siong Vincent (Dec 22)
    - Re: OT - Rant on State of S/w Engr (was Re: Buffer Overruns) Joseph S D Yao (Dec 23)
  - Re: Buffer Overruns Crispin Cowan (Dec 21)
- Re: Buffer Overruns Epstein, Jeremy (Dec 20)
- RE: Buffer Overruns Doty, Ted (ISSAtlanta) (Dec 20)
- RE: Buffer Overruns LeGrow, Matt (Dec 20)

(Thread continues...)