Attackers Can Decloak Routing-Based VPNs

Re:Attackers Can Decloak Routing-Based VPNs by Borealid on Tuesday May 07, 2024 @08:32AM (#40284715)

I can see how you can write rules that block "bad traffic", but I can't see how you write them so they don't also block some "good traffic" when the network assigns a routing rule.

I think the person here might be glossing over writing overzealous rules that cause the VPN connection to go down when an Option 121 route is assigned, when the ideal solution leaves the VPN functional (and causes tunneled traffic to ignore the route).

[ Parent | on HN ]

Re:Attackers Can Decloak Routing-Based VPNs by Brian_K_White on Tuesday May 07, 2024 @12:57PM (#40288305)

That has already been explained a couple times over.

[ Parent | on HN ]

Re:Attackers Can Decloak Routing-Based VPNs by Borealid on Tuesday May 07, 2024 @08:26PM (#40293078)

I don't understand your explanation because you just keep alluding to certain firewall rules but not actually showing them.

If you've done this, could you paste an `iptables -L -v` for me? That would make clear exactly what you're talking about. If there is a problem, I could then point it out, and if there is not, I could then understand how to do what you're saying.

[ Parent | on HN ]