Subject: Re: mail issues - status update
To: None <tech-net@netbsd.org>
From: der Mouse <mouse@Rodents.Montreal.QC.CA>
List: tech-net
Date: 04/11/2000 08:28:53
[moved from a less appropriate elsewhere]

> We ship with source-routing enabled by default?

I should hope so.

Disabling source routing is shooting the messenger.  The problem is not
source routing; the problem is daemons that make security decisions
based on peer IP addresses.  Disabling source routing is like blocking
ICMP in order to stop ping-of-death DoS - the right thing to do is fix
the bugs, not paper over the holes.

					der Mouse

			       mouse@rodents.montreal.qc.ca
		     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B