Re: ipfilter 3.4.28?

On Thu, May 08, 2008 at 07:46:44AM +0800, Darren Reed wrote:

> It depends on what you consider a "security" problem...

I'd mostly be worried about a bug that could provide remote code
execution without authentication, provide an elevated level of
privilege, or cause a crash.

> ..for example, the non-fragmented logging problem (fixed in 3.4.34)
> might worry some

I can live with a logging problem.

> ..the fix for ipf_pullup() in 3.4.33 could be cause for concern about
> reliability

Reliability how? Any risk of something crashing?

> ..the ftp proxy fixes for .29 might be cause for concern if you use that

They had no ipnat.conf at all. When they told me that, I recommended
that they start using it for FTP active mode to work, but if that's a
problem, I'll just tell them to forget I said that.

Thanks!

- Morty