RE: [Full-Disclosure] ICMP Covert channels question

[<lists-security@xxxxxxxxxxxxxx>]

"As an attacker, I would not design an exploit that *depended* upon private
addresses being routed external to the victim's router unless I first
verified that they were.

Paul Schmehl (pauls@xxxxxxxxxxxx)"

But Paul, you know that crackers rely on the misconfigured, unpatched masses
to exploit, not the people with properly configured routers and systems.
While you and I will implement ingress and egress anti-spoofing rules, in
the field I see plenty of misconfigured routers that don't.  

- Bryan K. Watson
- bwatson@xxxxxxxxxxxxxx

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html