Re: [PEN-TEST] advertising private IP numbers?

["Deus, Attonbitus" <Thor () HAMMEROFGOD COM>]

> Well, by definition, a Proxy/Firewall has to have ip forwarding turned
> on, or else it would not achieve the desired effect of passing any
> traffic.

Insofar as MS Proxy is concerned, this is not true.  IP Forwarding should be
spefically turned off, or anything on the external segment will be able to
route into your private network.  The forwarding functionality is provided
for by the proxy service itself.

I have seen forwarding turned on in cache-only configurations, but it is not
the correct setting when standard firewall/packet filtering configurations
are used.

---------------------------------
Attonbitus Deus
Thor () HammerofGod Com