Actually, This is a potential security issue, and it is usually considered 
appropriate to give the vendor a chance to at least comment on it before 
releaseing the details.


On Thu, 26 Sep 2002, Cox, Danny H. wrote:

> That's nice.
> 
> It is probably by flooding the DMZ NIC - an old hack trick.
> 
> Try inserting a RAF (Remote Access Filter) that denies all protocols
> from directly accessing the DMZ NIC.
> 
> FYI: Bad manners to claim you know something but "won't say until
> someone fixes it". It also sounds very childish.
> 
> Have a good day,
> 
> Danny
> 
> -----Original Message-----
> From: Andrew Batson [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, September 25, 2002 7:54 PM
> To: [EMAIL PROTECTED]
> Subject: [gb-users] Any ideas who I would contact at GTA with regards to
> a possible way to crash a GNATBox fire wall?
> 
> Hello All,
> I found a possible way to crash the GNAT firewall (gives me a kernel
> fault) every time in the GNATBox light version 3.3.0. Note, when I do
> the same process using GNATBox version 3.2.5, it does not crash at all.
> 
> I not 100% sure why this sis happening, only that it is. I have compared
> the configuration information for both 3.2.5 and 3.3.0 are the same.
> Also, it is running on the same hardware. So far this evening, every
> time I do this process when using the GNATbox version 3.3.0, it crash
> but not once has it crash under 3.2.5.
> 
> Will not say how I crash the GNAT firewall until GAT personnel can
> explain/fix the problem - if it is a problem. They may even be aware of
> it already not sure?
> 
> Thanks,
> Andrew AKA "Dyslextic"
> 
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> To subscribe to the digest version first unsubscribe, then
>  e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> Archive of the last 1000 messages:
>  http://www.mail-archive.com/[email protected]
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> To subscribe to the digest version first unsubscribe, then
>  e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> Archive of the last 1000 messages:
>  http://www.mail-archive.com/[email protected]

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
To subscribe to the digest version first unsubscribe, then
 e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archive of the last 1000 messages:
 http://www.mail-archive.com/[email protected]

Reply via email to