Re: (ASCEND) Configuring Your filter(Revised)(PipeX)

[ascend@digistar.com]

On Tue, 17 Mar 1998 ascend@digistar.com wrote:

> I tried this on one of my 4000s and it does NOT work.
> 
> This filter and the others that I have tried prevent the attack from
> passing THROUGH the MAX, but it does not protect the MAX itself. 

I'm noticing that the Ascend unit is less suceptible to attacks coming
through its WAN port than through the ethernet port.  Through ie0, it
dies...

hopefully someone will come up with another possibility...

> > 	I just implimented it on one of our MAX 4048's (The same one the
> > exploit rebooted when I tested it) and then tried the exploit against it
> > and the MAX did not reboot... so this appears to be a viable fix until
> > Ascend can do better and come up with a solution...


--
        
      /
  /  o     Jason Buchanan
 o         Digistar Microsystems
       /   jsb@digistar.com
      o    http://www.digistar.com/

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>

---

References:

• Re: (ASCEND) Configuring Your filter(Revised)(PipeX)
• From: ascend@digistar.com

---

• Prev by Date: Re: (ASCEND) Ascend Router SNMP Security Issues [Q]
• Next by Date: Re: (ASCEND) Configuring Your filter(Revised)(PipeX)
• Prev by thread: Re: (ASCEND) Configuring Your filter(Revised)(PipeX)
• Next by thread: (ASCEND) news.com - Ascend Kill Article
• Index(es):
  • Main
  • Thread