From: Philippe Biondi (phil@secdev.org)
Date: Wed Jul 28 2004 - 18:17:53 EDT
On Sat, 24 Jul 2004, wnorth wrote:
> So, I found something interesting during a pen test of an F5 3DNS device.
> Just doing a simple UDP port scan against the device and sourcing my port as
> udp/53 I was able to see all of the UDP services running. The next step
> would have been to try and test these services by keeping my source port as
> UDP/53. Anyone know of a way to do this, something like testing SNMP by
> sourcing as UDP/53, or some other test.
On linux, just use SNAT :
iptables -t nat -A POSTROUTING -d <target> -p udp -j SNAT --to <src>:53
-- Philippe Biondi <phil@ secdev.org> SecDev.org Security Consultant/R&D http://www.secdev.org PGP KeyID:3D9A43E2 FingerPrint:C40A772533730E39330DC0985EE8FF5F3D9A43E2
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:58 EDT