Great Circle Associates Firewalls
(August 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: your mail
From: Carl Jolley <cjolley @ iac . net>
Date: Sat, 19 Aug 1995 12:40:45 -0400 (EDT)
To: GLorge @ officetech . com
Cc: Baey Chin Cheng <dbsbanke @ technet . sg>, Lynda Meyer <lmeyer @ nette . com>, firewalls @ GreatCircle . COM
In-reply-to: <447D333001C42F79 @ -SMF->

WRT, item 1 quoted below, not _all_ ISP's generate dynamic IP
addresses for their SLIP/PPP users. There are some that do, indeed,
assign fixed IP addresses. All that would be required to determine
if any of such an ISP's users are logged-on would be a rather straight
forward program (or script) that pings the corresponding address(es) and
maintains a list of all currently active users.

**** cjolley @
 iac .
 net <Carl Jolley>
**** All opinions are my own and not necessarily those of my employer ****

On 17 Aug 1995 GLorge @
 officetech .
 com wrote:

> In similar terms - the breach would be hideously impossible:
> 
> 1.  When you dial into the ISP, the host will generate a dynamic IP address 
> for your use during that session.  Each time you dial in you will be given 
> another IP address from the ISP's pool which could number in the hundreds.
> 
> 2.  The hacker has to know you are dialed in to begin a successful attack. - 
> da.
> 
> 3.  Out of the box Windows 3.1 has none of the "server" options mentioned.
> 
> Questions to ask would include questions relating to the security of the 
> ISP's system and the policies regarding their employees etc.  How many IP 
> addresses are allocated?  Does the ISP allocate static IP addresses?  
> 
> -----------------------
> Gary S. Lorge
> Advanced Technology Division
> Office Technology, Inc.
> 1315 Gillingham Road
> Neenah, WI 54956
> glorge @
 officetech .
 com
> http://www.officetech.com
> 


References:
Indexed By Date Previous: Authentication before getting to the firewall
From: "Moubray, Steve" <SMOUBRAY @ dcc . com>
Next: Re: How many FWs and where?
From: Carl Jolley <cjolley @ iac . net>
Indexed By Thread Previous: Re: your mail
From: Steve Kennedy <steve @ gbnet . org>
Next: Re: your mail
From: cjc @ novell . com

Google
 
Search Internet Search www.greatcircle.com