Article View: comp.security.misc
Article #1026Re: Someone is routing a 10.x network
From: Michael Scheidell
Date: Mon, 12 Mar 2001 16:02
Date: Mon, 12 Mar 2001 16:02
27 lines
2424 bytes
2424 bytes
"gizmo" <nomail@nowhere.zap> wrote in message news:vnqpat0cg57h2p9fdprlo281vvobtb4o31@4ax.com... > Sorry if this is a dumb question but here goes. > > Is this an exposure for everybody running a LAN with 10.x.x.x set up > as trusted? Yes, unless you specifically block 10.0.0.0 at your gateway. you should (as 'nick' pointed out) not trust your ISP to follow the rfc's and should do the work yourself You should not only block 10.0.0.0/8 at your router, but 127.0.0.0/8, 192.168.0.0/16, 172.16.0.0/16 224.0.0.0/4 (I think it is 4) 0.0.0.0 AND, to prevent ipspoofing, block incoming ip packets that pretend to come from your internal public address To prevent YOUR lusers from doing same, prevent (different filter/rule) form originating same and sending them out. (see rfc's mentioned in thread above) -- Michael Scheidell Florida Datamation, Inc. scheidell@fdma.com / 1+(561) 368-9561 Internet Security and Consulting See updated IT Security News at http://www.fdma.com
Technical Details
Message-ID:
<98irv9$oo5$1@caerulus.cerintha.com>Path:
arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!logbridge.uoregon.edu!feed2.news.rcn.net!rcn!fdma.com!not-for-mailReferences:
<bEiq6.8946$a71.1642247@news3.mia> <Uajq6.9479$642.115238@news2.atl> <vnqpat0cg57h2p9fdprlo281vvobtb4o31@4ax.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,22d24d175e061f05 X-Google-Attributes: gidf922c,public X-Google-Thread: 1122a6,22d24d175e061f05 X-Google-Attributes: gid1122a6,public X-Google-Thread: ff723,22d24d175e061f05 X-Google-Attributes: gidff723,public X-Google-Thread: 10090f,e64d10ba21c36453,start X-Google-Attributes: gid10090f,public X-Google-ArrivalTime: 2001-03-12 08:32:02 PST Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!logbridge.uoregon.edu!feed2.news.rcn.net!rcn!fdma.com!not-for-mail From: "Michael Scheidell" <me2@privacy.net.nospam> Newsgroups: comp.security.misc,comp.security.firewalls,bellsouth.net.support.adsl,bellsouth.net.security Subject: Re: Someone is routing a 10.x network Date: Mon, 12 Mar 2001 11:02:47 -0500 Organization: Florida Datamation, Inc. Lines: 29 Message-ID: <98irv9$oo5$1@caerulus.cerintha.com> References: <bEiq6.8946$a71.1642247@news3.mia> <Uajq6.9479$642.115238@news2.atl> <vnqpat0cg57h2p9fdprlo281vvobtb4o31@4ax.com> Reply-To: "Michael Scheidell" <scheidell@fdma.com> NNTP-Posting-Host: home.scheidell.org X-Trace: caerulus.cerintha.com 984412969 25349 216.78.194.186 (12 Mar 2001 16:02:49 GMT) X-Complaints-To: abuse@fdma.com NNTP-Posting-Date: 12 Mar 2001 16:02:49 GMT X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200