Security hole at boot


For about 22 seconds at boot I can see ports on my external interface before the IP filter kicks in. I can ping the external interface from another computer during this time.


I'm assuming I'm doing something wrong concerning when services are started, but I'm at a loss. A search for boot at isaserver.org or in Shinder or Simmons got nowhere.

I haven't seen this at shutdown. I haven't tested this for boot after crash or power off.

Some of these ports I can shut off other ways (and normally have), but I expect a firewall to protect me from forgetting those things.

Dar Scott



Other related posts: