Project

General

Profile

Actions

Bug #183

closed

Bogons data isn't validated

Added by Chris Buechler about 12 years ago. Updated over 11 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Rules / NAT
Target version:
Start date:
11/25/2009
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
All
Affected Architecture:

Description

The contents of the bogons file isn't verified upon download before being installed, aside from the download being successful. Since the download can be successful yet not the legit file (ISP intercepting traffic to a portal page, or things of that nature), we need sanity checking of the file contents before installing it. See also list thread "Bogons file overwritten w/ bad data".


Files

update_bogons_verify.patch (2.03 KB) update_bogons_verify.patch Chris Buechler, 11/27/2009 07:48 PM
Actions #1

Updated by Chris Buechler about 12 years ago

Patch provided in list thread mentioned above.

Actions #2

Updated by Scott Ullrich about 12 years ago

It would make more sense to verify the file to the md5 that is now being generated at bogon-bn-nonagg.txt.md5

Actions #3

Updated by Scott Ullrich about 12 years ago

  • Status changed from New to Feedback
Actions #4

Updated by Chris Buechler over 11 years ago

  • Status changed from Feedback to Resolved
Actions

Also available in: Atom PDF