Re: Cfservd access through firewall - dangerous ?

[Richard Arends]

On 29 Apr 2002, Adrian Phillips wrote:

> Thanks. Actually this part is relatively easy to do. We can forward a
> port on the firewall to an internal machine without any problems, its
> the question of how secure it can be in terms of what cfservd allows
> and disallows that conerns me most.

This works, but is it safe??? It still can be possible to spoof one of the
ip's. Therefor i would lock it down with IPSEC, or (and?) hardcode the
mac-addresses in the arp tabel, or even if youre firewall supports it
(iptables), put it in there...

Greetings,

Richard.

----
An OS is like swiss cheese, the bigger it is, the more holes you get!