Great Circle Associates Firewalls
(January 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Air Force Web Site Hacked
From: Thomas Leitner <tom @ finwds01 . tu-graz . ac . at>
Date: Wed, 1 Jan 1997 14:59:49 +0100 (MET)
To: Paul Ferguson <pferguso @ cisco . com>
Cc: Mark Johnson <mark @ hercules . reno . nv . us>, Gene Lee <genel @ inforamp . net>, Dale Drew <ddrew @ mci . net>, Michael Idengren <midengre @ stetson . edu>, Christopher Klaus <cklaus @ iss . net>, "firewalls @ GreatCircle . COM" <firewalls @ GreatCircle . COM>
In-reply-to: <3 . 0 . 32 . 19961231180249 . 006b8f24 @ lint . cisco . com>

On Tue, 31 Dec 1996, Paul Ferguson wrote:

> Frankly, I think the suggestion of using non-writable media (ie. CD-ROMs)
> is rather unpractical. Most sufficiently interesting web sites contain
> ever-changing & constantly updated information, such as news, various
> daily features, etc.
> 
> Not a practical solution.

O.K. If you want to be really secure and still updateable, do this:

1.) Use two mirrored disks. One is mounted read-only one is mounted
    read/write. The two disks can contain not only the WEB data but
    the whole operating system as well. As someone already noted
    before: Linux (and I'm sure other Unixes as well) can be setup
    to run from an RO media.

2.) When updates are required: Mount the second mirror disk r/w,
    do the update and reboot from the second mirror disk which is
    now mounted read-only. If the system is setup properly,
    the reboot time and thus the outage time can be kept quite low.

3.) When the system comes up, mount the first disk RW and apply
    the updates as well to keep the disk contents in sync.

If the outage during the update is unacceptable what about using
two mirror machines: One standby and RW for updates and one
on-line running RO. After the update, machines could swap their
functions immediately. Sure: This would require some fancy IP 
address setup.

Tom

--------------------------------------------------------------------------
T o m   L e i t n e r                       Dept. of Communications
                                            Graz University of Technology, 
e-mail    : tom @
 finwds01 .
 tu-graz .
 ac .
 at      Inffeldgasse 12
Phone     : +43-316-873-7455                A-8010 Graz / Austria / Europe
Fax       : +43-316-463-697
Home page : http://wiis.tu-graz.ac.at/people/tom.html
PGP public key on : ftp://wiis.tu-graz.ac.at/pgp-keys/tom.asc or send 
mail with subject "get Thomas Leitner" to pgp-public-keys @
 keys .
 pgp .
 net
--------------------------------------------------------------------------



Follow-Ups:
Indexed By Date Previous:
From: (nil)
Next: Re: Air Force Web Site Hacked
From: Thomas Leitner <tom @ finwds01 . tu-graz . ac . at>
Indexed By Thread Previous:
From: (nil)
Next: Re: Air Force Web Site Hacked
From: Can Baysal <baysalc @ boun . edu . tr>

Google
 
Search Internet Search www.greatcircle.com