News for hackers. Stuff that matters.

A comment on NAT Slipstreaming. Parent comment

Re:NAT Slipstreaming by Lammy on Saturday October 31, 2020 @08:34PM (#24956409)
Am I safe with "scrub in all fragment reassemble" in my PF config on my router box?
[ Parent | on HN ]
Re:NAT Slipstreaming by PhantomGremlin on Saturday October 31, 2020 @09:47PM (#24956667)
Which OS are you running with PF?

On OpenBSD, PF will reassemble fragmented packets by default.

Your question still stands, is this sufficient to prevent this attack? Perhaps someone who has a greater understanding of PF and of this exploit can respond.

[ Parent | on HN ]
Re:NAT Slipstreaming by _-___________-_ on Sunday November 01, 2020 @12:25AM (#24957219)
PF doesn't implement any ALGs by default. To my knowledge, it doesn't even have any ALG capability. So, this type of attack would not work through a NAT implemented by PF unless you have separately added an ALG via hooks (like ftpsesame).
[ Parent | on HN ]