Re: one-way only sip, responses going back through the wrong interface
Spike <[email protected]> Mon, 06 Mar 2017 17:03:17 +0000
| Newsgroups | gmane.comp.security.firewalls.firehol.user |
|---|---|
| Message-ID | <CAPE6YbQJobcAL+6V9_9HmnCgqzO7tiXe4aEaHst01QyVhw=_dg@mail.gmail.com> |
b2ssIGNhbWUgYmFjayB0aGlzIG1vcm5pbmcgYW5kIGl0J3Mgd29ya2luZy4uLiBteSBvbmx5IGV4 cGxhbmF0aW9uLCB3aGljaCBJCmRpZG4ndCB0aGluayBvZiBsYXN0IG5pZ2h0LCBpcyB0aGF0IEkg aGFkIGNhY2hlZCByb3V0ZXMgc29tZSBwbGFjZS4gSQpzaG91bGQgaGF2ZSBwcm9iYWJseSBpc3N1 ZWQgYW4gaXAgcm91dGUgZmx1c2ggY2FjaGUgYW5kIG1heWJlIHRoYXQnZCBtYWRlCml0IHdvcmsu Cgp0aGFua3MsCgpTcGlrZQoKT24gU3VuLCBNYXIgNSwgMjAxNyBhdCAxMDozMSBQTSBTcGlrZSA8 c3Bpa2VAZHJiYS5vcmc+IHdyb3RlOgoKYWN0dWFsbHksIGJlYXIgd2l0aCBtZSwgbWF5YmUgaSdt IG1pc3Rha2VuIGJ1dCB0aGVyZSByZWFsbHkgc2VlbXMgdG8gYmUgYQpwcm9ibGVtIGFzIEknbSBz ZWVpbmcgdHJhZmZpYyB3aXRoIHNvdXJjZWlwIG9mIGlmYWNlNywgMTcyLjMwLjcuMiwgZ29pbmcK b3V0IG9mIGludGVyZmFjZSAyMC4gU28gaXQgcmVhbGx5IHNlZW1zIHRvIG1lIEknbSBkb2luZyBz b21ldGhpbmcgd3JvbmcKd2hlcmUgdHJhZmZpYyBpcyBzZW50IG91dCB0aGUgd3JvbmcgaW50ZXJm YWNlL3RoZSBpcCBvZiB0aGUgb3RoZXIuIEV2ZW4gaWYKdGhlIElUU1AgaGFzIGFuIGVzdGFibGlz aGVkIGNvbm5lY3Rpb24gdGhyb3VnaCBpZmFjZTIwIEknbSB0aGlua2luZyB0aGUKcm91dGluZyBl dGMgc2hvdWxkIGVuZm9yY2UgdGhlIHRyYWZmaWMgdG8gZ28gYmFjayBpZmFjZTcuIElzIHRoYXQg bm90IGhvdwppdCB3b3Jrcz8KCnRoYW5rcywKClNwaWtlCgpPbiBTdW4sIE1hciA1LCAyMDE3IGF0 IDk6NTIgUE0gU3Bpa2UgPHNwaWtlQGRyYmEub3JnPiB3cm90ZToKCnVwb24gc2Vjb25kIHRob3Vn aHRzLCB0aGlzIG1heSBqdXN0IGJlIGEgcHJvYmxlbSB3aXRoIHNpcCB0cnVua2luZyBhbmQKZmFp bG92ZXIgb24gdGhlIElUU1AgcGFydC4gTXkgUEJYIGhhZCBhbHJlYWR5IGEgY29ubmVjdGlvbiBv cGVuIHRvIHRoZSBJVFNQCm9uIGlmYWNlMjAgKHNlbGVjdGVkIHJhbmRvbWx5IGJ5IHdlaWdodCB3 aGVuIGFzdGVyaXNrIHN0YXJ0ZWQgdXApIHdoZW4gSQpvYnNlcnZlZCB0aGlzIHByb2JsZW0sIGJ1 dCBiZWNhdXNlIG9mIGEgY29uZmlndXJhdGlvbiBvbiB0aGUgSVRTUCBzaWRlIHRoZQpjYWxsIHdh cyBjb21pbmcgaW4gaWZhY2U3LiBBdCB0aGF0IHBvaW50IGknbSBndWVzc2luZyB0aGF0IGRlc3Bp dGUgdGhlCmNvbm5lY3Rpb24gaGF2aW5nIGNvbWUgaW4gdGhyb3VnaCA3LCB3YXMgc2VudCBvdXQg b3ZlciAyMCBiZWNhdXNlIG9mIHRoZQpleGlzdGluZyBjb25uZWN0aW9uIHRvIHRoZSBJVFNQLiBU aGVyZWZvcmUgdGhlIHByb2JsZW0gaXMgbm90IHJlYWxseSB3aXRoCnRoZSBmdywgYnV0IHdpdGgg dGhlIGNvbm5lY3Rpb25zIHRvIHRoZSBJVFNQLiBJIGd1ZXNzIEkgY291bGQgYWRkIHNvbWUKcnVs ZXMgdG8gcHJlZmVyIG9uZSByb3V0ZSBvdmVyIHRoZSBvdGhlciBhbmQgY29uZmlndXJlIGJvdGgg ZW5kcyB0byB1c2UKdGhhdCByb3V0ZSB1bmxlc3MgaXQgZmFpbHMgYXQgd2hpY2ggcG9pbnQgYm90 aCB3b3VsZCBzd2l0Y2ggdG8gdGhlIG90aGVyLgoKd291bGQgdGhhdCBiZSBhIHBvbGljeSByb3V0 aW5nIHJ1bGUgdG8gYWRkIHRvIGxpbmstYmFsYW5jZXIuY29uZj8KCnRoYW5rcywKClNwaWtlCgpP biBTdW4sIE1hciA1LCAyMDE3IGF0IDk6MzcgUE0gU3Bpa2UgPHNwaWtlQGRyYmEub3JnPiB3cm90 ZToKCkhpLAoKc3R1Y2sgaGVyZSBhbmQgd2FzIGhvcGluZyBzb21lb25lIG9uIHRoZSBsaXN0IG1p Z2h0IGhhdmUgYSBzdWdnZXN0aW9uIGZvcgpob3cgdG8gZGVidWcgdGhpcyBwcm9ibGVtLgoKSSBo YWQgYSB3b3JraW5nIGxpbmstYmFsYW5jZXIvZmlyZWhvbCBjb25maWd1cmF0aW9uLCBidXQgSSB0 aGluayBpdCB3b3JrZWQKYnkgYWNjaWRlbnQuLi4gZWl0aGVyIHRoYXQgb3IgdG9uaWdodCBJIGJy b2tlIHNvbWV0aGluZyBJIGNhbid0IGZpZ3VyZSBvdXQuCgpJIGhhdmUgdHdvIHVwbGlua3MgYW5k IGNvbm5lY3Rpb25zIGFyZSB3b3JraW5nIGFzIGZhciBJIGNhbiB0ZWxsICwgaW50ZXJuZXQKaXMg dXAsIEkgY2FuIGJyb3dzZSBmaW5lLCBob3dldmVyIHdoZW4gaXQgY29tZXMgdG8gU0lQIHNvbWV0 aGluZyBzdHJhbmdlIGlzCmhhcHBlbmluZzogdGhlIElOVklURSBpcyBjb21pbmcgdGhyb3VnaCBv bmUgdXBsaW5rLCBidXQgdGhlIGFuc3dlcnMgYXJlCmdvaW5nIG91dCBvZiB0aGUgb3RoZXIgd2l0 aCB0aGUgc3JjIGlwIG9mIHRoZSBpbnRlcm5hbCBpZmFjZSB0aGV5IGNhbWUgaW4KdGhyb3VnaC4K ClNldHVwIGlzIGFzIGZvbGxvd3M6Cmd3NzoxNzIuMzAuNy4xLzI0Cmd3MjA6MTcyLjMwLjIwLjEv MjQKZnc6CiAtIGlmYWNlNzogMTcyLjMwLjcuMi8yNAogLSBpZmFjZTIwOiAxNzIuMzAuMjAuMi8y NAoKZmlyZWhvbC5jb25mIGhhcyBjb25ubWFyayAweDcgaWZhY2U3IGFuZCBjb25ubWFyayAweDIw IGlmYWNlMjAKbGlua2JhbGFuY2VyLmNvbmYgaGFzIGEgcG9saWN5IHNlY3Rpb24gd2l0aCBjb25u bWFyayAweDcgdGFibGUgdDcgYW5kCmNvbm5tYXJrIDB4MjAgdGFibGUgdDIwCgp0aG9zZSBzaG91 bGQgaGF2ZSBiZWVuIGFsbCB0aGUgbmVjZXNzYXJ5IHN0ZXBzLCBidXQgY2xlYXJseSBJJ20gZG9p bmcKc29tZXRoaW5nIHdyb25nLiBBbnkgdGhvdWdodHM/Cgp0aGFua3MsCgpTcGlrZQpfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpGaXJlaG9sLXN1cHBvcnQg bWFpbGluZyBsaXN0CkZpcmVob2wtc3VwcG9ydEBsaXN0cy5maXJlaG9sLm9yZwpodHRwOi8vbGlz dHMuZmlyZWhvbC5vcmcvbWFpbG1hbi9saXN0aW5mby9maXJlaG9sLXN1cHBvcnQ=