A Stateful Inspection of FireWall-1

A Stateful Inspection of FireWall-1 Thomas Lopatic, John McDonald TUV data protect GmbH tl,[email protected] Dug Song Center for Information Technology Integration University of Michigan [email protected] 1 Introduction -------------- At the Black Hat Briefings 2000, we presented an analysis of...

ftp-ozone.c.txt

/ ftp-ozone.c Demonstrate a basic layer violation in "stateful" firewall inspection of application data within IP packets - @$@$!: http://www.checkpoint.com/techsupport/alerts/pasvftp.html Dug Song / include include include include include include include include include include include include...

fw1-ftp.txt

FireWall-1 FTP Server Vulnerability Background Paper 1, data protect AG John McDonald Thomas Lopatic References ---------- Please reference the recent vuln-dev posting by Mikael Olsson entitled, "Breaking through FTP ALGs -- is it possible?" At the time of this writing, it was not yet archived on...