From mboxrd@z Thu Jan 1 00:00:00 1970 From: /dev/rob0 Subject: Re: Completely Bypassing a Firewall?! Date: Wed, 25 Jan 2006 11:02:32 -0600 Message-ID: <200601251102.32615.rob0@gmx.co.uk> References: <1138198038.16454.73.camel@localhost.localdomain> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <1138198038.16454.73.camel@localhost.localdomain> Content-Disposition: inline List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org On Wednesday 2006-January-25 08:07, Jason Noble wrote: > We just heard a rumor about our rival company, that they have > developed a "system" that can completely bypass a > properly-configured/locked-down firewall (netfilter or any other). > > Is this truly possible? with only external access and no software > that's already been planted inside the firewall? The rumour and the question could only come from someone who has no understanding of firewalls. No. If your company provides firewalling products, you just made your company look bad. Might as well name the rival here, so they look bad too. :) -- mail to this address is discarded unless "/dev/rob0" or "not-spam" is in Subject: header