Re: IOS exploit: please disclose vehicle, not mechanism

Article View: comp.dcom.sys.cisco

Article #2253

Back to comp.dcom.sys.cisco Previous Next

#2253

From: Chris
Date: Thu, 24 Jul 2003 20:02

24 lines
2035 bytes

> The problem with these ACLs - "Transit ACLs",
> to be precise, is that when applied to edge
> routers earlier than 75xx or 12xxx series,
> the recommended line:
>
> access list ### 101 deny 53 any any
>
> means that DNS requests get blocked, with no
> workaround available.  If you happen to be an
> organization that handles its own external DNS,
> this is ungood.  Cisco acks this fact in the
> advisory:
>
> http://www.cisco.com/warp/public/707/cisco-sa-20030717-blocked.shtml
>

IP Protocol 53 -- SWIPE -- a network-layer encrypted encapsulation protocol
for IP; pre-dates IPsec and seems not to have been widely implemented

For someone who works for a Network Consulting Services company you really
aren't paying much attention to the details are you? Know the difference
between an IP protocol and a TCP/UDP port!

Chris.

Technical Details

Message-ID: <vi0eseqe4p8sc3@corp.supernews.com>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-03!sn-xit-06!sn-post-01!supernews.com!corp.supernews.com!not-for-mail

References:

<Xns93C1BACF3C55Awdjohnstoncomcastnet@206.127.4.25> <LqFTa.116237$wk6.30285@rwcrnsc52.ops.asp.att.net> <Xns93C294B29ED49wdjohnstoncomcastnet@206.127.4.25>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,536b22101f44acbf
X-Google-Attributes: gidf922c,public
X-Google-Thread: 114395,536b22101f44acbf
X-Google-Attributes: gid114395,public
X-Google-Thread: 102702,536b22101f44acbf
X-Google-Attributes: gid102702,public
X-Google-ArrivalTime: 2003-07-24 13:03:27 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-03!sn-xit-06!sn-post-01!supernews.com!corp.supernews.com!not-for-mail
From: "Chris" <never@work>
Newsgroups: comp.dcom.sys.cisco,ios.general,comp.security.firewalls
Subject: Re: IOS exploit: please disclose vehicle, not mechanism
Date: Thu, 24 Jul 2003 21:02:58 +0100
Organization: Posted via Supernews, http://www.supernews.com
Message-ID: <vi0eseqe4p8sc3@corp.supernews.com>
Reply-To: "Chris" <never@work>
References: <Xns93C1BACF3C55Awdjohnstoncomcastnet@206.127.4.25> <LqFTa.116237$wk6.30285@rwcrnsc52.ops.asp.att.net> <Xns93C294B29ED49wdjohnstoncomcastnet@206.127.4.25>
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2720.3000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Complaints-To: abuse@supernews.com
Lines: 28

Reply to Parent Message