Hi,
Any one on this list know of a partner contact at Foundry? Thank you in advance. Cheers, Jose [EMAIL PROTECTED] -------------- next part -------------- An HTML attachment was scrubbed... URL: https://puck.nether.net/pipermail/foundry-nsp/attachments/20030916/58d9c692/attachment.htm From [EMAIL PROTECTED] Wed Sep 17 10:55:59 2003 From: [EMAIL PROTECTED] (Cliff Albert) Date: Wed Sep 17 03:56:09 2003 Subject: [f-nsp] ACL issue on ve interfaces on a BigIron box Message-ID: <[EMAIL PROTECTED]> Hi there, At the moment I am experiencing some issues considering ACL's on ve interfaces. Especially ve interfaces where the vlan has more then 1 port. Sometimes the ACL will filter traffic that is NOT inside the vlan, but does flow over one of the two ports that are in the vlan. As we have more then 1 vlan tagged on these ports, the traffic involved is from another vlan. For example: Port 1: VLAN 5, VLAN 20, VLAN 30 Port 2: VLAN 5, VLAN 40, VLAN 31 If traffic from VLAN 20 goes to VLAN 31 (thus passing over both ports) sometimes traffic gets ACL'd away. We see this because a logging statement on VLAN 5. Anyone else seen this ? -- Cliff Albert | RIPE: CA3348-RIPE | https://oisec.net/ [EMAIL PROTECTED] | 6BONE: CA2-6BONE | PGP Fingerprint = 9ED4 1372 5053 937E F59D B35F 06A1 CC43 9A9B 1C5A From [EMAIL PROTECTED] Wed Sep 17 19:47:10 2003 From: [EMAIL PROTECTED] (Andrew Lee) Date: Wed Sep 17 14:47:11 2003 Subject: [f-nsp] OpenSSH vulnerability Message-ID: <[EMAIL PROTECTED]> Is Foundry gear vulnerable to the remote exploit (http://www.cert.org/advisories/CA-2003-24.html) in the OpenSSH engine? Apparently some Cisco gear is: http://www.cisco.com/warp/public/707/cisco-sa-20030917-openssh.shtml because they used the OpenSSH engine in CatOS (PIX and IOS are not). I hear rumblings that Juniper is as well. There doesn't seem to be anything on the web site, their latest press release was 9/8. It would be nice to know for sure one way or the other.
