|
|
BugTraq
Bypassing ISA Server 2004 with IPv6 Apr 03 2006 03:08PM Romain Le Guen romainl com (1 replies) Re: Bypassing ISA Server 2004 with IPv6 Apr 04 2006 12:40PM 3APA3A (3APA3A SECURITY NNOV RU) (2 replies) Re: Bypassing ISA Server 2004 with IPv6 Apr 05 2006 10:12AM Christine Kronberg (seeker shalla de) (2 replies) Re[2]: Bypassing ISA Server 2004 with IPv6 Apr 10 2006 12:22PM 3APA3A (3APA3A SECURITY NNOV RU) (1 replies) Re[2]: Bypassing ISA Server 2004 with IPv6 Apr 10 2006 07:34PM Christine Kronberg (seeker shalla de) (2 replies) Re: Re[2]: Bypassing ISA Server 2004 with IPv6 Apr 16 2006 03:28AM Thor (Hammer of God) (thor hammerofgod com) (1 replies) Re: Re[2]: Bypassing ISA Server 2004 with IPv6 Apr 16 2006 09:35PM Christine Kronberg (seeker shalla de) Re[3]: Bypassing ISA Server 2004 with IPv6 Apr 15 2006 11:17AM 3APA3A (3APA3A SECURITY NNOV RU) (1 replies) Re[3]: Bypassing ISA Server 2004 with IPv6 Apr 15 2006 08:23PM Christine Kronberg (seeker shalla de) (2 replies) Re: Re[3]: Bypassing ISA Server 2004 with IPv6 Apr 20 2006 04:22AM Thor (Hammer of God) (thor hammerofgod com) |
|
Privacy Statement |
expecting an IPv4 app to filter it. ISA doesn't filter NetBEUI either...
So, don't bind NetBEUI to the adapter, or better yet, if you do, don't
expect it to be filtered.
t
On 4/5/06 3:12 AM, "Christine Kronberg" <seeker (at) shalla (dot) de [email concealed]> spoketh to all:
> On Tue, 4 Apr 2006, 3APA3A wrote:
>
>> Dear Romain.Le.Guen (at) romainl (dot) com [email concealed],
>>
>> Neither ISA Server 2004 nor Windows 2003 Basic Firewall support IPv6
>> filtering, IPX filtering, etc. This is different network protocol.
>
> That's no excuse for letting IPv6 packets pass the firewall.
> If I understand correctly this means that the internal LAN
> is open for any attacks as long as they are IPv6 based. If that
> is right, this is an extremly nasty bug. If ISA Server 2004
> and Windows 2003 Basic Firewall cannot filter that stuff it
> should simply drop it.
>
> Cheers,
>
> Chris Kronberg.
>
>
>
>
[ reply ]