Security changes - restricting uhttpd addresses

[Karl Palsson]

Peter Naulls <peter at chocky.org> wrote:
> On 10/25/22 14:53, Luiz Angelo Daros de Luca wrote:
> is much easier to let the firewall zones deal with that.
> > 
> >> As aside, they don't see the iptables tool in the system, and don't
> >> understand that that's been deprecated (although I since did add it
> >> for some unrelated legacy usage), and think there's no firewall at all.
> > 
> > 22.03? Did you read the release notes? nftables.
> 
> Luiz, I think you might have missed the context of my post -
> perhaps you missed my earlier ones. I'm well aware that
> nftables is in use, but this is in a security review, and they
> see what they want to see.

If they see what they want to see, then why should anyone else
get involved in their wish fulfilment?

Security review is fine, security should not be entertained, and
certainly foisted on other people?

Sincerely,
Karl Palsson
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP-digital-signature.html
Type: application/pgp-signature
Size: 1175 bytes
Desc: OpenPGP Digital Signature
URL: <http://lists.openwrt.org/pipermail/openwrt-devel/attachments/20221025/8b1c2de7/attachment.sig>