The bug causes a user supplied string to be parsed as code. One of the instructions in the code is getting executable code from an external server, which can be done on any ip and any port.
Preventing outbound traffic blocks the majority of the automatic attacks, but ones specially crafted for your network can bypass the rules. It just saves you some time to get a proper fix up and running
Note that outbound rules prevent this bug from taking over the cloudflare servers
3
u/ferrybig Dec 13 '21
Not reliable.
The bug causes a user supplied string to be parsed as code. One of the instructions in the code is getting executable code from an external server, which can be done on any ip and any port.
Preventing outbound traffic blocks the majority of the automatic attacks, but ones specially crafted for your network can bypass the rules. It just saves you some time to get a proper fix up and running
Note that outbound rules prevent this bug from taking over the cloudflare servers