3 ms·
Only if you filter outgoing requests from a different box. If the attacker owns your kernel they can bypass the filtering. A nice OpenBSD box as an outbound fi
by justincormack 12y ago
Only if you filter outgoing requests from a different box. If the attacker owns your kernel they can bypass the filtering.
A nice OpenBSD box as an outbound filter does make sense though, with a different control mechanism.
- _RPM 12y agoWhat about connecting the suspect device to a switch and filtering all of the outbound requests on that switch. If request is approved, forward it to the internet?
- justincormack 12y agoI think you will find you need a decent packet filter that understands state on that "switch" and most switches wont do that in hardware, so it may as well be an appliance.