Re: Clock slew vulnerability in FreeBSD?

From: Mike Silbersack (silby_at_silby.com)
Date: 03/11/05

  • Next message: José María González: "Using a pseudo-device for IPC" 
    Date: Fri, 11 Mar 2005 00:00:36 -0600 (CST)
To: gnn@freebsd.org

    On Fri, 11 Mar 2005 gnn@freebsd.org wrote:

    > As to how vulnerable FreeBSD is to this I do not know nor do I know if
    > we should bother to do anything about it. What, in particular are you
    > worried about here? Also, if you consider this a security issue you
    > should probably also include the security team in this discussion.
    >
    > Later,
    > George

    I'd guess that we're fully "vulnerable" to this, but I don't see it really
    as an issue, unless someone is trying to hide a whole bunch of FreeBSD
    boxes behind that.

    And if that's what you're doing, run PF on the NAT machine, I think it has
    options to scramble such things, no matter what OS the clients behind it
    are running.

    Mike "Silby" Silbersack
    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

  • Next message: José María González: "Using a pseudo-device for IPC"