On Thu, 10 Jul 2008, Tim Clewlow wrote:
Assuming this is NOT a gateway, ie a single homed DNS.
nat on $ext_if proto udp from any to any port 53 -> ($ext_if)
That's the rule that works for me. You don't need to worry about tcp
because tcp is protected by its 32 bit initial sequence number.
If someone wants to go propose this fix on bugtraq, please don't mention
my name. I don't want to get dragged into it. :)
-Mike
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
