[Freeciv-Dev] Re: new connect dialog (ver 4) (PR#1911)

[Reinier Post <rp@xxxxxxxxxx>]

On Sun, Jan 19, 2003 at 07:59:39AM -0800, ChrisK@xxxxxxxx via RT wrote:
> On Sun, Jan 19, 2003 at 07:11:12AM -0800, Andreas Kemnade via RT wrote:
> > 
> > > Why isn't it sufficient to bind the server only to the loopback interface,
> > > e.g. with the recently posted freeciv-bindip-patch?
> > > 
> > Unix is a multi user operating system. Another user on the same machine can 
> > get
> > the hack accesslevel even when the server is only binded to the loopback
> > interface.
> 
> Oh yes. But the common gamer will be the only user of the machine.

Please.

> BTW does the loopback bind work on windows, too?
> 
> The possibility of connects to a civserver listening on 0.0.0.0 is still
> a risk IMHO. With Mike's approach there is the possibility of a DoS attack, 
> probably (not tested).

Mmm, does it introduce new possibilities of DoS attacks?

> > Greetings
> > Andreas Kemnade
> 
> Christian

-- 
Reinier