"As an attacker, I would not design an exploit that *depended* upon private
addresses being routed external to the victim's router unless I first
verified that they were.

Paul Schmehl ([EMAIL PROTECTED])"

But Paul, you know that crackers rely on the misconfigured, unpatched masses
to exploit, not the people with properly configured routers and systems.
While you and I will implement ingress and egress anti-spoofing rules, in
the field I see plenty of misconfigured routers that don't.  

- Bryan K. Watson
- [EMAIL PROTECTED]

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Reply via email to