oss-sec mailing list archives
Re: Attack on badly configured Netfilter-based firewalls
From: Solar Designer <solar () openwall com>
Date: Mon, 27 Feb 2012 05:25:01 +0400
Eugene, all - On Mon, Feb 27, 2012 at 09:19:59AM +0800, Eugene Teo wrote:
this some months ago. I've also tried to contact the various CERT but they refused to handle the case or did not reply to my requests.In future, if you tried to get help but you couldn't, feel free to send us an email at linux-distros vs.openwall.org.
When referring people to the distros and linux-distros list, please always refer them to the wiki page: http://oss-security.openwall.org/wiki/mailing-lists/distros Specifically, we need to ensure that people read this first: "Please note that the maximum acceptable embargo period for issues disclosed to these lists is 14 to 19 days, with embargoes longer than 14 days (up to 19) allowed in case the issue is reported on a Thursday or a Friday and the proposed coordinated disclosure date is thus adjusted to fall on a Monday or a Tuesday. Please do not ask for a longer embargo. In fact, embargo periods shorter than 7 days are preferable." It appears that in this case this would actually be a problem - that is, based on your suggestion (if you somehow made it to Eric much earlier), Eric would post to the list e.g. in January and ask for the issue to be kept private until March - thereby violating the list's maximum embargo period. Thanks, Alexander
Current thread:
- Attack on badly configured Netfilter-based firewalls Eric Leblond (Feb 25)
- Re: Attack on badly configured Netfilter-based firewalls Yves-Alexis Perez (Feb 25)
- Re: Attack on badly configured Netfilter-based firewalls Eric Leblond (Feb 26)
- Re: Attack on badly configured Netfilter-based firewalls Eugene Teo (Feb 26)
- Re: Attack on badly configured Netfilter-based firewalls Solar Designer (Feb 26)
- Re: Attack on badly configured Netfilter-based firewalls Eric Leblond (Feb 27)
- Re: Attack on badly configured Netfilter-based firewalls Eric Leblond (Mar 09)
- Re: Attack on badly configured Netfilter-based firewalls ArkanoiD (Mar 09)
- Re: Attack on badly configured Netfilter-based firewalls Eric Leblond (Mar 09)
- Re: Attack on badly configured Netfilter-based firewalls Kurt Seifried (Mar 09)
- Re: Attack on badly configured Netfilter-based firewalls Eric Leblond (Feb 26)
- Re: Attack on badly configured Netfilter-based firewalls Yves-Alexis Perez (Feb 25)
- Re: Attack on badly configured Netfilter-based firewalls Jussi Eronen (Mar 02)
- Re: Attack on badly configured Netfilter-based firewalls Kurt Seifried (Mar 02)
- Re: Attack on badly configured Netfilter-based firewalls Jussi Eronen (Mar 20)
- Re: Attack on badly configured Netfilter-based firewalls Eric Leblond (Feb 26)