Re: TCP Connections to a Broadcast Address

2002-02-24 Thread Ruslan Ermilov
On Sun, Feb 24, 2002 at 10:27:46AM -0800, Crist J. Clark wrote: > On Sun, Feb 24, 2002 at 10:49:21AM +0200, Ruslan Ermilov wrote: > > On Sat, Feb 23, 2002 at 03:49:55PM +0300, Maxim Konovalov wrote: > > > On 04:28-0800, Feb 23, 2002, Crist J. Clark wrote: > > > > > > > On Sat, Feb 23, 2002 at 01:

Re: TCP Connections to a Broadcast Address

2002-02-24 Thread Crist J. Clark
On Sun, Feb 24, 2002 at 10:47:02AM +0200, Ruslan Ermilov wrote: > On Sat, Feb 23, 2002 at 07:25:20AM -0800, Crist J. Clark wrote: [snip] > > If you are correct, and you can cross interfaces, this is a much > > bigger problem. I didn't mention it in your first mail, but the > > in_broadcast() fun

Re: TCP Connections to a Broadcast Address

2002-02-24 Thread Crist J. Clark
On Sun, Feb 24, 2002 at 10:49:21AM +0200, Ruslan Ermilov wrote: > On Sat, Feb 23, 2002 at 03:49:55PM +0300, Maxim Konovalov wrote: > > On 04:28-0800, Feb 23, 2002, Crist J. Clark wrote: > > > > > On Sat, Feb 23, 2002 at 01:50:33PM +0200, Ruslan Ermilov wrote: > > > [snip] > > > > > > > Nice catch

Re: TCP Connections to a Broadcast Address

2002-02-24 Thread Ruslan Ermilov
On Sat, Feb 23, 2002 at 03:49:55PM +0300, Maxim Konovalov wrote: > On 04:28-0800, Feb 23, 2002, Crist J. Clark wrote: > > > On Sat, Feb 23, 2002 at 01:50:33PM +0200, Ruslan Ermilov wrote: > > [snip] > > > > > Nice catch! > > > > Igor M Podlesny <[EMAIL PROTECTED]>, PR misc/35022, caught it. I jus

Re: TCP Connections to a Broadcast Address

2002-02-24 Thread Ruslan Ermilov
On Sat, Feb 23, 2002 at 07:25:20AM -0800, Crist J. Clark wrote: > On Sat, Feb 23, 2002 at 02:45:35PM +0200, Ruslan Ermilov wrote: > [snip] > > > Router B: if0 (192.168.1.1/24) and if1 (192.168.4.1/24) > > Router A: if0 (192.168.1.2/24) > > > > On router A: route add -net 192.168.4 192.168.1.1, t

Re: TCP Connections to a Broadcast Address

2002-02-23 Thread Crist J. Clark
On Sat, Feb 23, 2002 at 02:45:35PM +0200, Ruslan Ermilov wrote: [snip] > Router B: if0 (192.168.1.1/24) and if1 (192.168.4.1/24) > Router A: if0 (192.168.1.2/24) > > On router A: route add -net 192.168.4 192.168.1.1, telnet 192.168.4.255. > > Or even simpler: > > Router: if0 (192.168.1.1/24 an

Re: TCP Connections to a Broadcast Address

2002-02-23 Thread Maxim Konovalov
On 04:28-0800, Feb 23, 2002, Crist J. Clark wrote: > On Sat, Feb 23, 2002 at 01:50:33PM +0200, Ruslan Ermilov wrote: > [snip] > > > Nice catch! > > Igor M Podlesny <[EMAIL PROTECTED]>, PR misc/35022, caught it. I just > analyzed it. Isn't kern/19722 about the same bug? > [snip] maxim To Unsu

Re: TCP Connections to a Broadcast Address

2002-02-23 Thread Ruslan Ermilov
On Sat, Feb 23, 2002 at 04:28:28AM -0800, Crist J. Clark wrote: > On Sat, Feb 23, 2002 at 01:50:33PM +0200, Ruslan Ermilov wrote: > [snip] > > > Nice catch! > > Igor M Podlesny <[EMAIL PROTECTED]>, PR misc/35022, caught it. I just > analyzed it. > > [snip] > > > The patch is incomplete (see d

Re: TCP Connections to a Broadcast Address

2002-02-23 Thread Crist J. Clark
On Sat, Feb 23, 2002 at 01:50:33PM +0200, Ruslan Ermilov wrote: [snip] > Nice catch! Igor M Podlesny <[EMAIL PROTECTED]>, PR misc/35022, caught it. I just analyzed it. [snip] > The patch is incomplete (see dropwithreset below). Here's the tcp_input.c > part of the original delta that introdu

Re: TCP Connections to a Broadcast Address

2002-02-23 Thread Ruslan Ermilov
On Fri, Feb 22, 2002 at 02:26:26AM -0800, Crist J. Clark wrote: > BSD-based TCP/IP code have a bug with respect to creating TCP > connections to a broadcast address. This bug can potentially be a > security vulnerability when firewall administrators assume that the > TCP implementation works corre

Re: TCP Connections to a Broadcast Address

2002-02-22 Thread Crist J. Clark
Please note, the previous mail on this topic I sent to net@ has a bad 'From:' address in the header. Replies will not make it back to me. In responses, please change the 'To:' to one of my valid addresses like "[EMAIL PROTECTED]" I apologize for the confusion. I am still trying to figure out how