News for hackers. Stuff that matters.

A comment on CVE-2023-4809: FreeBSD pf bypass when using IPv6. Parent comment

Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6 by mmsc on Friday September 08, 2023 @05:16PM (#37439549)
Thank you for the response! I read "allow the rest" to mean "the rest of everything", rather than "the rest of the protocols".

Based on your explanation, does that mean if the restriction was

  block in quick on $ATTACKER_IF inet6 label "Block all connections from the attacker"
it would not succumb to this vulnerability? Great job with this, btw.
[ Parent | on HN ]

There are no comments on this comment yet.