On NT, you can install RRAS to filter what ever you want. For example
ICMP router advertisement. I think this should be type 9 code 0, if I'm
not wrong.
With NT install, I would strongly recommended you install RRAS (Routing
and Remote Access Services) because it really make us to have more control
on networking in NT environment which NT has been lacking off. This is a
free packages you can download from Microsoft NT Server homepage.
For Win95, I don't think they have RRAS for it.
Regards,
== Yen Jet ==
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Chan: "The bad news is, the Y2K bug will make all of our computers
thinks it's the year 1900. The good news is, that gives us
an extra 100 years to fix the problem!"
============================8<=======================================
On Tue, 13 Jul 1999, Laris Benkis wrote:
> Date: Tue, 13 Jul 1999 10:24:28 -0400
> From: Laris Benkis <[EMAIL PROTECTED]>
> To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
> Subject: Cable Modem Vulnerabilities
>
> On the subject of insecurities in cable environments here is a real
> one. The Windows 98 stack will listen to ICMP router advertisements
> and enter a new default route with metric 1000 if the advertisement
> uses the default preference of 0. Router advertisements are sent to
> the all hosts multicast address therefore they cross all bridge
> boundaries. If the station receives an ICMP destination unreachable
> from its configured default it will then change to the second default
> route. This will result in a denial of service if the originator of
> the advertisement does not forward the traffic, or a lovely
> opportunity to sniff traffic if he does. Win95 and NT do not appear
> to respond to router advertisements.
>
> Question - does anyone know of a registry setting to turn off
> listening to router advertisements?
>
> Laris
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
