Re: [Fwd: Re: Loopback and multi-homed routing flaw in TCP/IP

2001-03-07 Thread Darren Reed
In some mail from Ben Laurie, sie said: Aleph1 wrote: A flaw in the standard not on the stack. RFC 1122 "Requirements for Internet Hosts -- Communication Layers" covers this issue although without pointing out its security consequences. In the case that a host is not routing, it is

Re: [Fwd: Re: Loopback and multi-homed routing flaw in TCP/IP stack.]

2001-03-06 Thread Ben Laurie
Aleph1 wrote: A flaw in the standard not on the stack. RFC 1122 "Requirements for Internet Hosts -- Communication Layers" covers this issue although without pointing out its security consequences. In the case that a host is not routing, it is abundantly clear that the strong model is the