hardenedbsd/HardenedBSD
1
0
Fork 0
mirror of https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git synced 2024-11-28 03:42:04 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Strengthen the rules governing the 127.0.0.0/8 subnet. The previous rules

Browse Source 
allowed external hosts to send packets to the 127.0.0.0/8 subnet on the
firewall host.

Renumber the lo0 rules to guarantee they appear first.

PR:		6406
Submitted by:	Archie Cobbs <archie@whistle.com>
This commit is contained in:
alex 1998-04-25 00:40:55 +00:00
parent 42fda990ad
commit 01c59a917d
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
etc/rc.firewall
View File

@ -1,6 +1,6 @@
############
# Setup system for firewall service.
# $Id: rc.firewall,v 1.17 1998/04/15 16:41:14 phk Exp $
# $Id: rc.firewall,v 1.18 1998/04/18 10:27:05 brian Exp $
if [ -f /etc/rc.conf ]; then
. /etc/rc.conf
@ -76,8 +76,8 @@ fi
############
# Only in rare cases do you want to change these rules
$fwcmd add 1000 pass all from any to any via lo0
$fwcmd add 1010 deny all from 127.0.0.0/8 to 127.0.0.0/8
$fwcmd add 100 pass all from any to any via lo0
$fwcmd add 200 deny all from any to 127.0.0.0/8
# Prototype setups.