[4981] in linux-announce channel archive
Linux-Announce Digest #274
daemon@ATHENA.MIT.EDU (Digestifier)
Sun Nov 6 16:13:08 2005
From: Digestifier <Linux-Announce-Request@senator-bedfellow.mit.edu>
To: Linux-Announce@senator-bedfellow.mit.edu
Reply-To: Linux-Announce@senator-bedfellow.mit.edu
Date: Sun, 6 Nov 2005 16:13:05 EST
Linux-Announce Digest #274, Volume #5 Sun, 6 Nov 2005 16:13:05 EST
Contents:
TCP/IP connection cutter - 1.03 - IpCop 1.4.x pre-built version (Chris Lowth)
----------------------------------------------------------------------------
Date: Sun, 6 Nov 2005 14:30:21 -0600
From: Chris Lowth <chris@lowth.com>
Subject: TCP/IP connection cutter - 1.03 - IpCop 1.4.x pre-built version
The TCP/IP connection cutting utility "cutter" 1.03 is now available as
a pre-built binary for IpCop 1.4.x, in addition to the more usual
source-only distribution.
"Cutter" sources and IpCop binary are available for download from
http://www.lowth.com/cutter
TCP/IP connection cutter is a software tool that can be run on a linux
firewall to forcibly abort a connection between server and client that
passes through the firewall. This is done in a way that leaves both ends
believing that it was the other that initiated the abort. Only a device
that sits in the path of the connection (such as the firewall) can do this.
The ability to abort a connection in this way can be useful to firewall
administrators for any number of reasons. For example...
*
An administrator identifies that a workstation on his network is
using a service on the public network that should not be
permitted. He can force the closure of the connection. This might
be because of the network bandwidth being used, or the nature of
the service or some other reason that fits the organization's
security policy.
*
Or: a firewall administrator can forcibly close SSH tunnels or
VPNs that rogue employees leave open over night between their
office desktops and home networks. This can be a real problem, and
it is a well known access route into private networks.
*
Or a web server administrator can request that a rogue incoming
connection is terminated without having to "kill" the web server
process on the server.
A connection cutter is NOT a way for rogue systems to terminate
connections made by others - it must be run by an administrator on one
of the Linux firewalls through which the connection passes and as such
has limited application for attackers interested in denial-of-service
exploits.
##########################################################################
# Send submissions for comp.os.linux.announce to: cola@stump.algebra.com #
# PLEASE remember a short description of the software and the LOCATION. #
# This group is archived at http://stump.algebra.com/~cola/ #
##########################################################################
------------------------------
** FOR YOUR REFERENCE **
The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:
Internet: Linux-Announce-Request@NEWS-DIGESTS.MIT.EDU
You can submit announcements to be moderated via:
Internet: linux-announce@NEWS.ORNL.GOV
Linux may be obtained via one of these FTP sites:
ftp.funet.fi pub/Linux
tsx-11.mit.edu pub/linux
sunsite.unc.edu pub/Linux
End of Linux-Announce Digest
******************************
