nanog mailing list archives

Re: Routers vs. PC's for routing - was list problems?


From: "E.B. Dreger" <eddy+public+spam () noc everquick net>
Date: Fri, 24 May 2002 05:08:44 +0000 (GMT)


Date: Fri, 24 May 2002 00:52:14 -0400
From: Valdis.Kletnieks () vt edu


I've heard tell that a good way to secure a Linux box that's
doing this is to have it boot, set up the interfaces, set up
iptables, and then do a quick /sbin/halt - if you fail to
'ifconfig down' the interfaces on the way down, the kernel will
happily forward the packets while being immune to exploits

[ snip ]

Hmmmm.  A most interesting thought.  Even if that doesn't work,
one could modify /sbin/init to suit one's needs; several variants
for embedded systems already exist.


--
Eddy

Brotsman & Dreger, Inc. - EverQuick Internet Division
Phone: +1 (316) 794-8922 Wichita/(Inter)national
Phone: +1 (785) 865-5885 Lawrence

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <blacklist () brics com>
To: blacklist () brics com
Subject: Please ignore this portion of my mail signature.

These last few lines are a trap for address-harvesting spambots.
Do NOT send mail to <blacklist () brics com>, or you are likely to
be blocked.


Current thread: