Re: one-way only sip, responses going back through the wrong interface
Spike <[email protected]> Mon, 06 Mar 2017 06:31:35 +0000
| Newsgroups | gmane.comp.security.firewalls.firehol.user |
|---|---|
| Message-ID | <CAPE6YbTa6pVHvoUT6yE6YVbn4E2mdH1-d+_h+eGkhOPqcXO9dQ@mail.gmail.com> |
YWN0dWFsbHksIGJlYXIgd2l0aCBtZSwgbWF5YmUgaSdtIG1pc3Rha2VuIGJ1dCB0aGVyZSByZWFs bHkgc2VlbXMgdG8gYmUgYQpwcm9ibGVtIGFzIEknbSBzZWVpbmcgdHJhZmZpYyB3aXRoIHNvdXJj ZWlwIG9mIGlmYWNlNywgMTcyLjMwLjcuMiwgZ29pbmcKb3V0IG9mIGludGVyZmFjZSAyMC4gU28g aXQgcmVhbGx5IHNlZW1zIHRvIG1lIEknbSBkb2luZyBzb21ldGhpbmcgd3JvbmcKd2hlcmUgdHJh ZmZpYyBpcyBzZW50IG91dCB0aGUgd3JvbmcgaW50ZXJmYWNlL3RoZSBpcCBvZiB0aGUgb3RoZXIu IEV2ZW4gaWYKdGhlIElUU1AgaGFzIGFuIGVzdGFibGlzaGVkIGNvbm5lY3Rpb24gdGhyb3VnaCBp ZmFjZTIwIEknbSB0aGlua2luZyB0aGUKcm91dGluZyBldGMgc2hvdWxkIGVuZm9yY2UgdGhlIHRy YWZmaWMgdG8gZ28gYmFjayBpZmFjZTcuIElzIHRoYXQgbm90IGhvdwppdCB3b3Jrcz8KCnRoYW5r cywKClNwaWtlCgpPbiBTdW4sIE1hciA1LCAyMDE3IGF0IDk6NTIgUE0gU3Bpa2UgPHNwaWtlQGRy YmEub3JnPiB3cm90ZToKCj4gdXBvbiBzZWNvbmQgdGhvdWdodHMsIHRoaXMgbWF5IGp1c3QgYmUg YSBwcm9ibGVtIHdpdGggc2lwIHRydW5raW5nIGFuZAo+IGZhaWxvdmVyIG9uIHRoZSBJVFNQIHBh cnQuIE15IFBCWCBoYWQgYWxyZWFkeSBhIGNvbm5lY3Rpb24gb3BlbiB0byB0aGUgSVRTUAo+IG9u IGlmYWNlMjAgKHNlbGVjdGVkIHJhbmRvbWx5IGJ5IHdlaWdodCB3aGVuIGFzdGVyaXNrIHN0YXJ0 ZWQgdXApIHdoZW4gSQo+IG9ic2VydmVkIHRoaXMgcHJvYmxlbSwgYnV0IGJlY2F1c2Ugb2YgYSBj b25maWd1cmF0aW9uIG9uIHRoZSBJVFNQIHNpZGUgdGhlCj4gY2FsbCB3YXMgY29taW5nIGluIGlm YWNlNy4gQXQgdGhhdCBwb2ludCBpJ20gZ3Vlc3NpbmcgdGhhdCBkZXNwaXRlIHRoZQo+IGNvbm5l Y3Rpb24gaGF2aW5nIGNvbWUgaW4gdGhyb3VnaCA3LCB3YXMgc2VudCBvdXQgb3ZlciAyMCBiZWNh dXNlIG9mIHRoZQo+IGV4aXN0aW5nIGNvbm5lY3Rpb24gdG8gdGhlIElUU1AuIFRoZXJlZm9yZSB0 aGUgcHJvYmxlbSBpcyBub3QgcmVhbGx5IHdpdGgKPiB0aGUgZncsIGJ1dCB3aXRoIHRoZSBjb25u ZWN0aW9ucyB0byB0aGUgSVRTUC4gSSBndWVzcyBJIGNvdWxkIGFkZCBzb21lCj4gcnVsZXMgdG8g cHJlZmVyIG9uZSByb3V0ZSBvdmVyIHRoZSBvdGhlciBhbmQgY29uZmlndXJlIGJvdGggZW5kcyB0 byB1c2UKPiB0aGF0IHJvdXRlIHVubGVzcyBpdCBmYWlscyBhdCB3aGljaCBwb2ludCBib3RoIHdv dWxkIHN3aXRjaCB0byB0aGUgb3RoZXIuCj4KPiB3b3VsZCB0aGF0IGJlIGEgcG9saWN5IHJvdXRp bmcgcnVsZSB0byBhZGQgdG8gbGluay1iYWxhbmNlci5jb25mPwo+Cj4gdGhhbmtzLAo+Cj4gU3Bp a2UKPgo+IE9uIFN1biwgTWFyIDUsIDIwMTcgYXQgOTozNyBQTSBTcGlrZSA8c3Bpa2VAZHJiYS5v cmc+IHdyb3RlOgo+Cj4gSGksCj4KPiBzdHVjayBoZXJlIGFuZCB3YXMgaG9waW5nIHNvbWVvbmUg b24gdGhlIGxpc3QgbWlnaHQgaGF2ZSBhIHN1Z2dlc3Rpb24gZm9yCj4gaG93IHRvIGRlYnVnIHRo aXMgcHJvYmxlbS4KPgo+IEkgaGFkIGEgd29ya2luZyBsaW5rLWJhbGFuY2VyL2ZpcmVob2wgY29u ZmlndXJhdGlvbiwgYnV0IEkgdGhpbmsgaXQgd29ya2VkCj4gYnkgYWNjaWRlbnQuLi4gZWl0aGVy IHRoYXQgb3IgdG9uaWdodCBJIGJyb2tlIHNvbWV0aGluZyBJIGNhbid0IGZpZ3VyZSBvdXQuCj4K PiBJIGhhdmUgdHdvIHVwbGlua3MgYW5kIGNvbm5lY3Rpb25zIGFyZSB3b3JraW5nIGFzIGZhciBJ IGNhbiB0ZWxsICwKPiBpbnRlcm5ldCBpcyB1cCwgSSBjYW4gYnJvd3NlIGZpbmUsIGhvd2V2ZXIg d2hlbiBpdCBjb21lcyB0byBTSVAgc29tZXRoaW5nCj4gc3RyYW5nZSBpcyBoYXBwZW5pbmc6IHRo ZSBJTlZJVEUgaXMgY29taW5nIHRocm91Z2ggb25lIHVwbGluaywgYnV0IHRoZQo+IGFuc3dlcnMg YXJlIGdvaW5nIG91dCBvZiB0aGUgb3RoZXIgd2l0aCB0aGUgc3JjIGlwIG9mIHRoZSBpbnRlcm5h bCBpZmFjZQo+IHRoZXkgY2FtZSBpbiB0aHJvdWdoLgo+Cj4gU2V0dXAgaXMgYXMgZm9sbG93czoK PiBndzc6MTcyLjMwLjcuMS8yNAo+IGd3MjA6MTcyLjMwLjIwLjEvMjQKPiBmdzoKPiAgLSBpZmFj ZTc6IDE3Mi4zMC43LjIvMjQKPiAgLSBpZmFjZTIwOiAxNzIuMzAuMjAuMi8yNAo+Cj4gZmlyZWhv bC5jb25mIGhhcyBjb25ubWFyayAweDcgaWZhY2U3IGFuZCBjb25ubWFyayAweDIwIGlmYWNlMjAK PiBsaW5rYmFsYW5jZXIuY29uZiBoYXMgYSBwb2xpY3kgc2VjdGlvbiB3aXRoIGNvbm5tYXJrIDB4 NyB0YWJsZSB0NyBhbmQKPiBjb25ubWFyayAweDIwIHRhYmxlIHQyMAo+Cj4gdGhvc2Ugc2hvdWxk IGhhdmUgYmVlbiBhbGwgdGhlIG5lY2Vzc2FyeSBzdGVwcywgYnV0IGNsZWFybHkgSSdtIGRvaW5n Cj4gc29tZXRoaW5nIHdyb25nLiBBbnkgdGhvdWdodHM/Cj4KPiB0aGFua3MsCj4KPiBTcGlrZQo+ Cj4KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KRmlyZWhv bC1zdXBwb3J0IG1haWxpbmcgbGlzdApGaXJlaG9sLXN1cHBvcnRAbGlzdHMuZmlyZWhvbC5vcmcK aHR0cDovL2xpc3RzLmZpcmVob2wub3JnL21haWxtYW4vbGlzdGluZm8vZmlyZWhvbC1zdXBwb3J0