Re: [fw-wiz] X server in a Firewall

On Tue, 24 Jan 2006, Brian Loe wrote:

> Can you elaborate on what you're saying here?

Sure, in-band management provides an attacker with a vulnerability surface
that's difficult to stop and gives the defender tunneling issues that are
difficult to defend against. Look at the phone system in the 70's-
in-band signaling made for widespread phreaker abuse.

> And what's the proxy running on the firewall doing?

Hopefully content analysis, protocol enforcement and transport layer
re-creation.

Paul
-----------------------------------------------------------------------------
Paul D. Robertson "My statements in this message are personal opinions
paul@xxxxxxxxxxxx which may have no basis whatsoever in fact."
http://fora.compuwar.net Infosec discussion boards

_______________________________________________
firewall-wizards mailing list
firewall-wizards@xxxxxxxxxxxxxxxxxx
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards