Philip Prindeville de8b88ce17 firewall: add rule for traceroute support ... Running your firewall's "wan" zone in REJECT zone (1) exposes the presence of the router, (2) depending on the sophistication of fingerprinting tools might identify the OS and release running on the firewall which then identifies known vulnerabilities with it and (3) perhaps most importantly of all, your firewall can be used in a DDoS reflection attack with spoofed traffic generating ICMP Unreachables or TCP RST's to overwhelm a victim or saturate his link. This rule, when enabled, allows traceroute to work even when the default input policy of the firewall for the wan zone has been set to DROP. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>		2020-05-21 20:23:10 +02:00
..
firewall.config	firewall: add rule for traceroute support	2020-05-21 20:23:10 +02:00
firewall.hotplug	firewall: don't reload if there were no address or data changes	2014-01-19 17:35:33 +00:00
firewall.init	package/*: remove useless explicit set of function returncode	2014-08-25 06:35:50 +00:00
firewall.user	firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA	2013-06-04 12:21:52 +00:00