Disabling ipv6

[James Hogarth]

> This kind of depends on what iptables or firewall rules you have,
> but for a moment lets assume that you allow "related" connections on your
input.
>
> What this means is to allow anything you connect outbound to to be
> trusted to make a reverse connection back to you.
>
> So you are therefore trusting everything you connect to.  Doesn't
> sound very "Secure" to me.
>

That's not what related means...

Related refers to the returning flow for a given session (sequence numbers
need to match etc) or in the case of ftp with the appropriate ftp conntrack
module then the data channel related to the control channel TCP session
currently open not that the destination can then connect willy nilly back
to the source...
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/users/attachments/20130713/a4f59d12/attachment-0001.html>