Great Circle Associates Firewalls
(January 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Some day I'll learn...
From: padgett @ tccslr . dnet . mmc . com (A. Padgett Peterson, P.E. Information Security)
Date: Thu, 5 Jan 95 21:54:07 -0500
To: "firewalls @ greatcircle . com"@UVS1.dnet.mmc.com

...not to make so many obscure references:

1) The "Dutch Hacker" tape (VHS) 30 minutes Never The Same Colour:
   as of last year it was available for U$10.00 from 2600 magazine (horrors)
   POB 752, Middle Island, New York, 11953 USA - you can call 516-751-2600
   and ask for the guy with the leather hat but I would not give out a credit 
   card number 8*).

2) PCs dunno but I suspect we have a coupla thousand licenses for software
   that includes among other theings the abiliy to be both an SMTP and FTP
   *servers*. I suspect that if they read the instruction books, many companies
   will find that they have the same thing since many of the popular packages
   include it. Telnetd is free. Macintoshes are worse.

   I suspect that most people would be amazed how many .coms are nothing 
   more than a PC with Novell-DOS 7.0 multitasking an SMTP and FTP server
   and a 14.4 modem connection to a provider (heck - I know of a class B
   domain in NYC whose connection/email server is exactly that - don't ask).

3) The nice part is that my personal mail server is an "obsolete" 386sx-16
   with 40 Mb drive, 2 Mb of 80 ns memory, and a 3C503. The last three such 
   I brought home came from a corporate surplus sale for U$10.00 each. The one
   behind me I pulled out of the salvage pile. Have real-time mail while the
   one on my desk is never tied up for such things. *Real* multi-processing
   and the only port that can be opened is 25.

4) Answer to the modem/PPP/SLIP-on-the-desk is modem registration and periodic
   sweeps of our phone lines (five digit dialing makes for fast connections)
   for Things Which Respond. We authorize special modem lines for those who
   need them - auto-answer requires a briefing but woe betide the owner of
   a non-registered modem, they tend to disappear and the supervisor must
   come down to claim it.

5) Have been running "socket2me" periodically on local lines to do the
   same for E-net, fact that all nodes are registered down to their MAC
   address helps. With c.a. 30 ms response times does not take long
   particularly with YAPC dedicated to the task. Have not yet figured
   out a way to automate checking the Appleshare zones for open guest
   accounts but only takes about an hour (didn't say couldn't - just
   haven't - know of a company with a product that will allow me to
   do it from a PC & am waiting for that.)

6) And it works. On essentially zero budget and capital expense (didn't
   say I was cheap though 8*).

				You get the idea,
						Padgett
  

Indexed By Date Previous: Being polite...
From: padgett @ tccslr . dnet . mmc . com (A. Padgett Peterson, P.E. Information Security)
Next: Re: PC using external service
From: paul @ mci . net (Paul Krumviede)
Indexed By Thread Previous: Being polite...
From: padgett @ tccslr . dnet . mmc . com (A. Padgett Peterson, P.E. Information Security)
Next: INTUDERS ARE HERE
From: uncl @ llnl . gov (Frank Swift @ Home)

Google
 
Search Internet Search www.greatcircle.com