Great Circle Associates Firewalls
(February 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: irc and firewalls
From: Benedikt Stockebrand <benedikt @ devnull . ruhr . de>
Date: 28 Feb 1997 23:19:03 +0100
To: firewalls @ GreatCircle . COM
In-reply-to: peter @ baileynm . com's message of Thu, 27 Feb 1997 10:17:27 -0600 (CST)
References: <9702271617 . AA28006 @ sonic . nmti . com . nmti . com>

peter @
 baileynm .
 com (Peter da Silva) writes:

> Why not just stick a box outside the firewall running BSD or Linux and ircII,
> and have them telnet to it to IRC?

On any outside machine I'd rather avoid running a telnetd (or servers
for any other protocol designed without proper security
considerations) on it.  However, there's ssh and similar secured
telnet-like protocols available.

If you get a sufficiently big box and trust ssh's X11 forwarding you
might even consider to run netscape on such a box (provided your users
have Un*x boxes).  While I personally feel a uncomfortable about
letting an outside machine access an internal X11 server, this still
seems a reasonable approach if your users actually need a fancy (i.e.
java(script)? capable) web browser for some reason.


    Ben

-- 
Ben(edikt)? Stockebrand    Runaway ping.de Admin---Never Ever Trust Old Friends
My name and email address are not to be added to any list used for advertising
purposes.  Any sender of unsolicited advertisement e-mail to this address im-
plicitly agrees to pay a DM 500 fee to the recipient for proofreading services.


References:
Indexed By Date Previous: RE: [FW1] Firewall 2.1 , Solaris and rouing
From: Hans Vermeulen <hansv @ gv-nmc . unisource . nl>
Next: Re: irc and firewalls
From: Benedikt Stockebrand <benedikt @ devnull . ruhr . de>
Indexed By Thread Previous: Re: irc and firewalls
From: Kevin McPeake <cowboy @ home . byelex . nl>
Next: Re: irc and firewalls
From: Brian Tackett <cym @ acrux . net>

Google
 
Search Internet Search www.greatcircle.com