Re: [MISC] Angreb på 127.0.0.1

[Mogens Valentin <sslug@sslug>]

Jacob Bunk Nielsen wrote:
> Anders Misfeldt <sslug@sslug> writes:
>
>
> > Han sidder sikkert stadig og undrer sig over Elch' super firewall.
>
>
> Ja, god underholdning, men faktisk så kan Linux jo også sådan noget.
> iptables har et target der hedder MIRROR:
>
> ,----[ Fra iptables(8) ]
> |  MIRROR
> |    This is an experimental demonstration target which inverts  the  source
> |    and destination fields in the IP header and retransmits the packet.  It
> |    is only valid in the INPUT, FORWARD and PREROUTING  chains,  and  user-
> |    defined  chains which are only called from those chains.  Note that the
> |    outgoing packets are NOT seen by any packet filtering  chains,  connec-
> |    tion tracking or NAT, to avoid loops and other problems.
> `----

Caution: Med mirror kan man måske uforvarende komme til at deltage i et 
ddos angrep, hvis crackeren sender spoofed packets.

--
Kind regards,
Mogens Valentin