[REBOL] Re: Commander.c adds Shell access for Rebol
From: athena:pop3-dfw:myfirstlink at: 24-Mar-2001 10:35
127.0.0.0/8 has special attributes in the IP network. It is not
assigned to anyone so it can not be routed in the Internet except by
default routes nor can it get out of a router since no network
interfaces are configured with this address.
On the local LAN, potentially 127.0.0.1 could be directed to a specific
machine, but you have bigger problems than an attack on your machine if
it is coming from your internal network. Systems should always assume
that 127.x.x.x is destined for itself so it should be very difficult to
get a 127.x.x.x packet onto even the local network.
For internal machine communication between socket based applications
127.0.0.1 does not pose a serious threat. The real issue is activation
of the TCP or UDP port on which you intend to communicate. Any system
that can get to your machine can access the port. The "server" end of
the connection should verify that the "client" end is 127.0.0.1 and
reject any other connections from other IP addresses.
Harold Grovesteen
Deryk Robosson wrote:
