Hi all , weel at least someone agrees with me,
maybe there's hope yet ?

as I've gone back to 8.1 because I use this machine for networking
can someone check the default setting on :-
/proc/sys/net/ipv4/conf/all/rp_filter


If this has been set to 1 ,this is really crazy for any system that has
2 NIC's, or anyone who wishes to use their system as a server.
If I understand the function of this filter it will reject any incoming
packet which does not match the network interface it arrives on.

This function, is well protected by iptables and iptables2, so if this
has been set why impose this whim on everyone.
This should only be set if you want to become a cyber-hermit .

 ie put it in the highest level of MSEC, not by default..

There is very little point giving the end user a nice app to set his
firwall to what he/she wants, if its function is invalid by a default
setting, which a newbie is very unlikely to find.

The reason I dont use SuSE is there is little or no choice on how you
want the system to perform, if Mandrake goes the same way it'll be a
very sad day, I dont want a Tuetonic OS.

And as for the premadonna who said my fault, as I did'nt dual boot, I
think anyone with common sense knows my answer to that.

regards Richard
On Sun, 2002-03-03 at 16:40, David Walser wrote:
> 
> --- Leon Brooks <[EMAIL PROTECTED]> wrote:
> > On Sunday 03 March 2002 14:55, David Walser wrote:
> > > I
> > > remember the first time I used Apache, RH 5.2
> > days.
> > > All I had to do was install it, and it was fully
> > > functional, it was great!
> > 
> > It had security holes you could drive a train
> > through. The 'net isn't as 
> > ``country'' any more. )-:
> 
> I agree with that, and I'm all for the move that's
> been made from functionality to security over the past
> couple years, but like that one guy said in the first
> place, in this particular instance it's taking it a
> little too far.  Calling this a security fix is a joke.
> 
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Sports - sign up for Fantasy Baseball
> http://sports.yahoo.com
> 



Reply via email to