[Nut-upsuser] Help with failing Nut slave/client connection

Tim Dawson tadawson at tpcsvc.com
Wed Sep 14 02:34:15 UTC 2016


Tough to get a spoofed IP to actually route back to it's host though, so 
other than those unfortunate to be on a flat network, still not too much 
of an issue . . .

- Tim

On 09/12/2016 04:46 PM, Stuart D. Gathman wrote:
> On Mon, 12 Sep 2016, Tim Dawson wrote:
>
>> Or just set up sane firewall rules to allow the two to talk, but block
>> external traffic. I have run this way for years - all add'rs ar IANA 
>> in a
>> subnet block, and just that block is open locally, and all other 
>> external
>> IP's severely restricted, and NUT works great . . .
>
> Yeah, but IANA ips are easy to spoof.  With cjdns, you allow just the
> cjdns IPs to connect to nut (or whatever) and they can't be spoofed.
> You can even use telnet over cjdns ips.  :-)
>

-- 
Tim Dawson

972-567-9360




More information about the Nut-upsuser mailing list