Hi,

i have read of malicious Javascript in Websites somewhere that can basically portscan your lan.

regards,
David

alexander lind wrote:
On Jun 13, 2008, at 4:22 PM, Aaron Stellman wrote:

On Fri, Jun 13, 2008 at 04:05:12PM -0400, alexander lind wrote:
Hi all

Is there currently any known method for detecting information about a
machine behind a PF firewall?

Specifically, if I have a machine with two IP addresses, is it
possible for a remote attacker to detect that these two IP addresses
are bound on the same machine  (this machine would be behind a PF
firewall with the scrubbing option). The two IP addresses would be
known to the attacker.

Nobody will answer your question without seeing your ruleset and other
detailed information.

I was just discussing this with someone, I don't have a machine set up right now. But if we just assume a really simple configuration with the 'scrub all' directive in use, and using the common 'block in all' statement as well?

Thanks
Alec


!DSPAM:4854f583977791721785640!

Reply via email to