🚀 go-pugleaf

In article <4jfc0j$pee@inferno.mpx.com.au>,
	smilie@jolt.mpx.com.au (Anthony Rumble) writes:
>
>BUT.... I disagree with your statement that Source Routing should
>be enabled.. Source Routing is a potential security risk, I wont
>go into details, but someone with more knoweledge of the hows and whys
>may wish to join in here.
>

Source Routed Frames being dropped should be enabled (as it is by default).
My understanding is that source routed frames are ones that you receive
(via an interface) that have the source IP address set to the IP address
of your own box. This can fool software into allowing access to a service
because most security checking is done against the source IP address. Of
course setting up a stream of these packets that make sense to another
persons system, and compromise it's security, is best left as an excersise
for the reader. :-)

--            +------------------------------------------------------------+
        .     | John Saunders  - johns@rd.scitec.com.au             (Work) |
    ,--_|\    |                - john@nlc.net.au                    (Home) |
   /  Oz  \   |                - http://www.nlc.net.au/~johns/             |
   \_,--\_/   | SCITEC LIMITED - Phone +61 2 428 9563 - Fax +61 2 428 9933 |
         v    +------------------------------------------------------------+