RE: ICMP Covert channels question

[<lists-security () nettracers com>]

"As an attacker, I would not design an exploit that *depended* upon private
addresses being routed external to the victim's router unless I first
verified that they were.

Paul Schmehl (pauls () utdallas edu)"

But Paul, you know that crackers rely on the misconfigured, unpatched masses
to exploit, not the people with properly configured routers and systems.
While you and I will implement ingress and egress anti-spoofing rules, in
the field I see plenty of misconfigured routers that don't.  

- Bryan K. Watson
- bwatson () nettracers com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html