All things related to multicast

[Dan Pritts <>]

On Wed, Jan 24, 2007 at 04:31:20PM +0100, Stig Venaas wrote:
> Is a firewall for multicast really needed? Would it be bad to just let
> all multicast UDP packets to high ports through?

Imagine a situation where IGMP snooping has broken (i'm sure this will be
difficult to imagine), and a multicast stream that one user has requested
to contains an exploit against some known hole in some other service.

If i were the sort to firewall my network against unicast i would certainly
firewall it against multicast.

danno
--
Dan Pritts, System Administrator
Internet2
office: +1-734-352-4953 | mobile: +1-734-834-7224