All of lore.kernel.org
 help / color / mirror / Atom feed
From: luke@techfreak.org
To: linux-admin@vger.kernel.org
Subject: Re: SSH allow only form selected IP'
Date: Sun, 15 Aug 2004 09:59:36 -0500 (CDT)	[thread overview]
Message-ID: <1216.66.189.78.234.1092581976.squirrel@srv01.scriptgods.com> (raw)
In-Reply-To: <411F5E12.6000608@lovedthanlost.net>

I'm definitely not a firewall expert, but isn't it also possible to
get around
IPchains using IP spoofing? From what I know ipchains is only
protected against spoofing by using source address verification.

Or am I way off?

Luke



> luke@techfreak.org wrote:
>
>>One very effective way that I have found to do this is to use the
'hosts.allow' file located at /etc/hosts.allow
> hosts.allow is NOT secure.  You can easily spoof the IP addresses
contained within it.  You should not use it.
>
> Regards
>
> James
>
>




  parent reply	other threads:[~2004-08-15 14:59 UTC|newest]

Thread overview: 15+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-08-14 11:52 Re[2]: SSH allow only form selected IP' luke
2004-08-15 12:58 ` James Turnbull
2004-08-15 13:54   ` Re[2]: " Kev
2004-08-15 14:59   ` luke [this message]
2004-08-16 11:23     ` James Turnbull
2004-08-16 13:37       ` Re[2]: " Kev
2004-08-16 16:30         ` VPN question Tony Gogoi
2004-08-16 17:29           ` Adam Lang
2004-08-16 18:50             ` Tony Gogoi
2004-08-16 18:59               ` Adam Lang
2004-08-18 10:46         ` SSH allow only form selected IP' Stephen Samuel
  -- strict thread matches above, loose matches on Subject: below --
2004-08-14 10:34 Kev
2004-08-14 10:54 ` James Turnbull
2004-08-14 11:18   ` Re[2]: " Kev
2004-08-14 11:42     ` James Turnbull
2004-08-14 11:46     ` James Turnbull

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1216.66.189.78.234.1092581976.squirrel@srv01.scriptgods.com \
    --to=luke@techfreak.org \
    --cc=linux-admin@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.