search for: ipv4options

hi list! it is not really a shorewall question but more iptables related: is there a way to block icmp echo request packets with record route option set other than completely block icmp echo requests? googling the topic i found a patchomatic project that introduces an ipv4options match, that allows to match on record route. i also browsed through /proc/sys/net/ipv4 but didn''t find anything promising. i am concerned about this because this feature allows a potential attacker to neatly map your network. TIA for your input/ideas regards matthias -- "Unix give...

...38 01 45 c0 mov 0xc0450138,%eax Code; c0474fda <init+1a/80> 11: ff 40 10 incl 0x10(%eax) fuzzy.patch ALREADY APPLIED (0 rejects out of 2 hunks). iplimit.patch NOT APPLIED ( 2 missing files) ipt_unclean-ubit.patch NOT APPLIED (1 rejects out of 1 hunks) ipv4options.patch NOT APPLIED ( 2 missing files) IPV4OPTSSTRIP.patch NOT APPLIED ( 1 missing files) mport.patch ALREADY APPLIED (0 rejects out of 2 hunks). NETLINK.patch NOT APPLIED ( 2 missing files) NETMAP.patch NOT APPLIED ( 1 missing files) nth.patch ALREADY APPLIED (0 rejects out of 2 hunks). pool.patch N...

On Sun, Nov 07 2010 at 6:05pm -0500, Andi Kleen <andi@firstfloor.org> wrote: > On Sun, Nov 07, 2010 at 10:39:23PM +0100, Milan Broz wrote: > > On 11/07/2010 08:45 PM, Andi Kleen wrote: > > >> I read about barrier-problems and data getting to the partition when > > >> using dm-crypt and several layers so I don''t know if that could be > >