Re: IOS exploit: please disclose vehicle, not mechanism

Article View: comp.dcom.sys.cisco

Article #2251

Back to comp.dcom.sys.cisco Previous Next

#2251

From: John C. Ring, Jr.
Date: Thu, 24 Jul 2003 19:09

11 lines
1674 bytes

In article <Xns93C294B29ED49wdjohnstoncomcastnet@206.127.4.25>, Bill Johnston <wdj-netconsult@consultant.com> wrote:
>access list ### 101 deny 53 any any
>
>means that DNS requests get blocked, with no
>workaround available.

access-list 101 deny udp any any eq domain
access-list 101 deny tcp  any any eq domain

would block DNS service.  "deny 53 any any" denies IP protocol 53, not access 
to udp/tcp port 53.

Technical Details

Message-ID: <bfp8m5$gcl$1@usenet.switch.com>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!bloom-beacon.mit.edu!ra.nrl.navy.mil!dca1-feed2.news.algx.net!jfk3-feed1.news.algx.net!allegiance!usenet.switch.com!ringjc

References:

<Xns93C1BACF3C55Awdjohnstoncomcastnet@206.127.4.25> <LqFTa.116237$wk6.30285@rwcrnsc52.ops.asp.att.net> <Xns93C294B29ED49wdjohnstoncomcastnet@206.127.4.25>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,536b22101f44acbf
X-Google-Attributes: gidf922c,public
X-Google-Thread: 114395,536b22101f44acbf
X-Google-Attributes: gid114395,public
X-Google-Thread: 102702,536b22101f44acbf
X-Google-Attributes: gid102702,public
X-Google-ArrivalTime: 2003-07-24 12:18:15 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!bloom-beacon.mit.edu!ra.nrl.navy.mil!dca1-feed2.news.algx.net!jfk3-feed1.news.algx.net!allegiance!usenet.switch.com!ringjc
From: jcring@switch.com (John C. Ring, Jr.)
Newsgroups: comp.dcom.sys.cisco,ios.general,comp.security.firewalls
Subject: Re: IOS exploit: please disclose vehicle, not mechanism
Date: Thu, 24 Jul 2003 19:09:46 GMT
Organization: Union Switch & Signal Inc.
Lines: 11
Message-ID: <bfp8m5$gcl$1@usenet.switch.com>
References: <Xns93C1BACF3C55Awdjohnstoncomcastnet@206.127.4.25> <LqFTa.116237$wk6.30285@rwcrnsc52.ops.asp.att.net> <Xns93C294B29ED49wdjohnstoncomcastnet@206.127.4.25>
NNTP-Posting-Host: dhcp133-172-16-3.switch.com
X-Trace: usenet.switch.com 1059071493 16789 172.16.3.152 (24 Jul 2003 18:31:33 GMT)
X-Complaints-To: usenet@switch.com
NNTP-Posting-Date: 24 Jul 2003 18:31:33 GMT
X-Newsreader: News Xpress 2.01

Reply to Parent Message