Responding to the DNS vulnerability and attacks

This is good to know ...: Furthermore, if you have a server behind a NAT device, some NAT devices will undo the UDP port randomness introduced by the patch. Fortunately, Linux iptables and OpenBSD?s pf are not vulnerable, but many popular NAT devices are.

I've been told by quite a few people that if you're running behind a NAT device you didn't have to enable iptables in Linux. Myself being overly cautious enabled iptables on all of my machines regardless of location.

Guess my paranoia for once paid off.; Posted by: MisterMiester Posted on: 07/28/08 (Edited: 07/28/2008 @ 10:08) You are currently: a Guest | Members login | Terms of Use

Reply to Story Reply to Message

Subscribe to this discussion via Email or RSS

This is good to know ... MisterMiester | 07/28/08

Economic Terrorists croberts | 07/28/08

Interesting thoughts nmcfeters | 07/28/08

watch those assumptions shawn_dude | 07/29/08

Tough call beoz | 07/29/08

What do you think?

Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now
CDW Services Overview: Unified Communications CDW Businesses that utilize unified communications solutions empower employees ... Download Now
Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now

Thought-provoking progressive ideas on diverse topics that intersect with technology, business, and life, and matter to the world at large. Visit SmartPlanet
More from IBM
How to Drive Better Business Outcomes with Exceptional Web Experiences Download the eBook
Driving Business Agility through SOA Connectivity & Integration Read the White Paper from IBM
Linking Decisions and Information for Organizational Performance Read the Tom Davenport study