search

mandiant / flare-fakenet-ng

FakeNet-NG - Next Generation Dynamic Network Analysis Tool
Apache License 2.0
1.8k stars 361 forks source link

Users want to restrict which interfaces FakeNet-NG listens on #62

Closed strictlymike closed 5 years ago

strictlymike commented 6 years ago

Users like @garsim and @DigiAngel would like a setting that governs what interfaces the FakeNet-NG listeners can receive traffic from.

Note that LinuxRedirectNonlocal (on Linux) is not sufficient because that setting only concerns the network interfaces where the Linux Diverter implements packet redirection. Meanwhile, the listeners all bind to 0.0.0.0 irrespective of that setting, which is why users don't see the behavior they are hoping for when modifying that setting from its default value of *.

strictlymike commented 5 years ago

FakeNet-NG version 1.4.5 now supports this. Feels good, doesn't it @mlhaigh?

strictlymike commented 5 years ago

We've retired the LinuxRedirectNonlocal setting and that behavior is now controlled by the new LinuxRestrictInterface setting.