[unisog] no-ip.com etc.

Valdis.Kletnieks at vt.edu Valdis.Kletnieks at vt.edu
Fri Oct 24 20:34:18 GMT 2003


On Fri, 24 Oct 2003 12:32:12 PDT, Ben Curran <bdc1 at humboldt.edu>  said:

> We have a policy which restricts students from hosting servers in the residence halls. 
> Students with dynamic IP client software can easily circumvent hardware based (acl) 
> restrictions/enforcement of this policy. (i.e only allowing "tcp established" connections 
> inbound on an interface)

If your border router stomps on inbound TCP packets with the SYN bit set and
dest port 25, they're going to have a hard time running a mail server.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://www.dshield.org/pipermail/unisog/attachments/20031024/b5e09f0b/attachment-0003.bin


More information about the unisog mailing list