Re: [PEN-TEST] IRC

[Helmut Springer <delta () FAVEVE UNI-STUTTGART DE>]

On Mon 2001-02-26 (13:13), Fabio Pietrosanti wrote:
> Linux has a module for handling DCC SEND in his nat subsystem, and
> should be pretty easy to hack it to rewrite the DCC SEND command
> with ip address such as 127.0.0.1 :)

If you're behind NAT and use a whitelist of destination ports, not
supporting DCC will obviously block it.

using an application gateway with limitations would be safest,
several proxies (often called 'bouncer') are available as source.


> > Tell your users NEVER to accept DCC sends NEVER to do a DCC send
> Users does'nt respect policy!

work harder on that part.  it pays most.

but then, this is far from PEN-TEST's subject I'd say...

--
MfG/best regards, helmut springer
        
                                   Life is a bitch and then you die.