RE: Loose source routing for remote host discovery

From: Dario Ciccarone <dciccaro(at)cisco.com>
Date: Thu May 08 2003 - 17:09:33 EDT

Sure thing. IOS routers would forward source-routed packets depending on configuration (yes by default, can be turned off, should be turned off, our best practices strongly advise to turn it off :D)) - PIX firewalls are even more fussy.

Best thing would be to compromise a host dual-homed to those "private" networks and also to "public" networks - or a network device itself, and make it route the packets the way you want.

> -----Original Message-----

---

Did you know that you have VNC running on your network? Your hacker does.
Plug your security holes.
Download a free 15-day trial of VAM:
http://www.securityfocus.com/StillSecure-pen-test

---

Received on Fri May 9 14:04:34 2003