Re: Hairpin NAT - possible without packet marking?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



What do all the locks in the world help when you invite the burglar in for tea? In other words: most IT departments have the incoming traffic pinned down as you described, but a single executable disguised as a clip of a cute kitty, downloaded and executed by any employee is what nowadays forms the real threat.

On July 4, 2017 3:14:59 AM GMT+02:00, Robert White <rwhite@xxxxxxxxx> wrote:
>They had
>people sharing segments of their hard drives. Pooled servers with just
>ludicrously broad write policies, printers, store and forward scanners,
>all the normal stupid things that let business function. And you know,
>what, its well they should. Security that becomes a denial of service
>attack on the corporation's innards just encourages misuse.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux