Re: one-way only sip, responses going back through the wrong interface
Spike <[email protected]> Mon, 06 Mar 2017 05:52:38 +0000
| Newsgroups | gmane.comp.security.firewalls.firehol.user |
|---|---|
| Message-ID | <CAPE6YbQw4cgViDs8N7M6B4N7M00H=UVr5=dKdCvdWpeaJpuNPA@mail.gmail.com> |
dXBvbiBzZWNvbmQgdGhvdWdodHMsIHRoaXMgbWF5IGp1c3QgYmUgYSBwcm9ibGVtIHdpdGggc2lw IHRydW5raW5nIGFuZApmYWlsb3ZlciBvbiB0aGUgSVRTUCBwYXJ0LiBNeSBQQlggaGFkIGFscmVh ZHkgYSBjb25uZWN0aW9uIG9wZW4gdG8gdGhlIElUU1AKb24gaWZhY2UyMCAoc2VsZWN0ZWQgcmFu ZG9tbHkgYnkgd2VpZ2h0IHdoZW4gYXN0ZXJpc2sgc3RhcnRlZCB1cCkgd2hlbiBJCm9ic2VydmVk IHRoaXMgcHJvYmxlbSwgYnV0IGJlY2F1c2Ugb2YgYSBjb25maWd1cmF0aW9uIG9uIHRoZSBJVFNQ IHNpZGUgdGhlCmNhbGwgd2FzIGNvbWluZyBpbiBpZmFjZTcuIEF0IHRoYXQgcG9pbnQgaSdtIGd1 ZXNzaW5nIHRoYXQgZGVzcGl0ZSB0aGUKY29ubmVjdGlvbiBoYXZpbmcgY29tZSBpbiB0aHJvdWdo IDcsIHdhcyBzZW50IG91dCBvdmVyIDIwIGJlY2F1c2Ugb2YgdGhlCmV4aXN0aW5nIGNvbm5lY3Rp b24gdG8gdGhlIElUU1AuIFRoZXJlZm9yZSB0aGUgcHJvYmxlbSBpcyBub3QgcmVhbGx5IHdpdGgK dGhlIGZ3LCBidXQgd2l0aCB0aGUgY29ubmVjdGlvbnMgdG8gdGhlIElUU1AuIEkgZ3Vlc3MgSSBj b3VsZCBhZGQgc29tZQpydWxlcyB0byBwcmVmZXIgb25lIHJvdXRlIG92ZXIgdGhlIG90aGVyIGFu ZCBjb25maWd1cmUgYm90aCBlbmRzIHRvIHVzZQp0aGF0IHJvdXRlIHVubGVzcyBpdCBmYWlscyBh dCB3aGljaCBwb2ludCBib3RoIHdvdWxkIHN3aXRjaCB0byB0aGUgb3RoZXIuCgp3b3VsZCB0aGF0 IGJlIGEgcG9saWN5IHJvdXRpbmcgcnVsZSB0byBhZGQgdG8gbGluay1iYWxhbmNlci5jb25mPwoK dGhhbmtzLAoKU3Bpa2UKCk9uIFN1biwgTWFyIDUsIDIwMTcgYXQgOTozNyBQTSBTcGlrZSA8c3Bp a2VAZHJiYS5vcmc+IHdyb3RlOgoKPiBIaSwKPgo+IHN0dWNrIGhlcmUgYW5kIHdhcyBob3Bpbmcg c29tZW9uZSBvbiB0aGUgbGlzdCBtaWdodCBoYXZlIGEgc3VnZ2VzdGlvbiBmb3IKPiBob3cgdG8g ZGVidWcgdGhpcyBwcm9ibGVtLgo+Cj4gSSBoYWQgYSB3b3JraW5nIGxpbmstYmFsYW5jZXIvZmly ZWhvbCBjb25maWd1cmF0aW9uLCBidXQgSSB0aGluayBpdCB3b3JrZWQKPiBieSBhY2NpZGVudC4u LiBlaXRoZXIgdGhhdCBvciB0b25pZ2h0IEkgYnJva2Ugc29tZXRoaW5nIEkgY2FuJ3QgZmlndXJl IG91dC4KPgo+IEkgaGF2ZSB0d28gdXBsaW5rcyBhbmQgY29ubmVjdGlvbnMgYXJlIHdvcmtpbmcg YXMgZmFyIEkgY2FuIHRlbGwgLAo+IGludGVybmV0IGlzIHVwLCBJIGNhbiBicm93c2UgZmluZSwg aG93ZXZlciB3aGVuIGl0IGNvbWVzIHRvIFNJUCBzb21ldGhpbmcKPiBzdHJhbmdlIGlzIGhhcHBl bmluZzogdGhlIElOVklURSBpcyBjb21pbmcgdGhyb3VnaCBvbmUgdXBsaW5rLCBidXQgdGhlCj4g YW5zd2VycyBhcmUgZ29pbmcgb3V0IG9mIHRoZSBvdGhlciB3aXRoIHRoZSBzcmMgaXAgb2YgdGhl IGludGVybmFsIGlmYWNlCj4gdGhleSBjYW1lIGluIHRocm91Z2guCj4KPiBTZXR1cCBpcyBhcyBm b2xsb3dzOgo+IGd3NzoxNzIuMzAuNy4xLzI0Cj4gZ3cyMDoxNzIuMzAuMjAuMS8yNAo+IGZ3Ogo+ ICAtIGlmYWNlNzogMTcyLjMwLjcuMi8yNAo+ICAtIGlmYWNlMjA6IDE3Mi4zMC4yMC4yLzI0Cj4K PiBmaXJlaG9sLmNvbmYgaGFzIGNvbm5tYXJrIDB4NyBpZmFjZTcgYW5kIGNvbm5tYXJrIDB4MjAg aWZhY2UyMAo+IGxpbmtiYWxhbmNlci5jb25mIGhhcyBhIHBvbGljeSBzZWN0aW9uIHdpdGggY29u bm1hcmsgMHg3IHRhYmxlIHQ3IGFuZAo+IGNvbm5tYXJrIDB4MjAgdGFibGUgdDIwCj4KPiB0aG9z ZSBzaG91bGQgaGF2ZSBiZWVuIGFsbCB0aGUgbmVjZXNzYXJ5IHN0ZXBzLCBidXQgY2xlYXJseSBJ J20gZG9pbmcKPiBzb21ldGhpbmcgd3JvbmcuIEFueSB0aG91Z2h0cz8KPgo+IHRoYW5rcywKPgo+ IFNwaWtlCj4KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18K RmlyZWhvbC1zdXBwb3J0IG1haWxpbmcgbGlzdApGaXJlaG9sLXN1cHBvcnRAbGlzdHMuZmlyZWhv bC5vcmcKaHR0cDovL2xpc3RzLmZpcmVob2wub3JnL21haWxtYW4vbGlzdGluZm8vZmlyZWhvbC1z dXBwb3J0