*the infected targetted cannot touch the firewall machine in any way, except as ...

		j_s on Nov 11, 2013 \| parent \| context \| favorite \| on: Isowall: Mini-firewall that completely isolates a ... the infected targetted cannot touch the firewall machine in any way, except as allowed within the is_allowed() function The security guarantee is derived from the minimal attack surface of this is_allowed() method, but fails to consider the dependency on libpcap!