Re: [Shorewall-users] Does the Unicode security hole affect Shorewall?

[Will M. <wil...@gm...>]

It certainly doesn't sound like it.  Shorewall doesn't (unless I
missed something) scan HTTP traffic, it just looks at the packet
headers.  Thus, no Unicode problems, etc.

Will

On 5/31/07, Family Heritage Books <Fam...@ao...> wrote:
> Recently I ran across an article in eweek
> http://www.eweek.com/article2/0,1895,2130397,00.asp?kc=EWKNLEDP051607B
> basically saying that there is a serious security hole affecting
> virtually every major firewall and intrusion prevention system available.
> It seems to involve a network evasion technique that uses full-width and
> half-width unicode characters to allow malware to evade detection by an
> IPS or firewall.
>
> Does anyone know if this is an issue that affects Shorewall.
> --
> Thanx for your time,
> Bryan
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Shorewall-users mailing list
> Sho...@li...
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>