[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] --ping-restart



> Just curious: why not just use a nonprivileged socket? What do you gain
> from using a low port? Once your port is bound, no one else will be able
> to bind it. AFAICT you're only avoiding the small likelihood of a non-
> root user binding that port before you can ... ahhh, and maybe such an
> attacker could intercept traffic from the peer? Is that it?

not quite - my illusions regarding security have vanished slowly during 
the last 30-odd years of my it 'career'... ;-)

i need a 'low' port because of firewall peculiarities on the client 
side.
oh yes, i could kinda 'nat' it on my side, true, maybe...

-- 


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users