Re: Firewall ACL determinations

From: Oliver Karow (Oliver.Karow@gmx.de)
Date: 03/03/02


From: "Oliver Karow" <Oliver.Karow@gmx.de>
To: "Kelley John C. J9C548" <kelleyj@je.jfcom.mil>, "Pen-Test (E-mail)" <pen-test@securityfocus.com>
Date: Sun, 3 Mar 2002 00:23:09 +0100

Hi,

you can use AssItch from Thomas Biege...

 http://www.suse.de/~thomas/tools/assitch/index.html

bye,

Oliver Karow
----- Original Message -----
From: "Kelley John C. J9C548" <kelleyj@je.jfcom.mil>
To: "Pen-Test (E-mail)" <pen-test@securityfocus.com>
Sent: Friday, February 22, 2002 7:17 PM
Subject: Firewall ACL determinations

> All,
> What 'best practice' tools are available for ACL determination? I
> have been tasked to develop a full spectrum vulnerability assessment test
> plan and have not found a great deal on ACL determination. Any info or
> links are appreciated.
>
> Thanks,
>
> John
>
> --------------------------------------------------------------------------

--
> This list is provided by the SecurityFocus Security Intelligence Alert
(SIA)
> Service. For more information on SecurityFocus' SIA service which
> automatically alerts you to the latest security vulnerabilities please
see:
> https://alerts.securityfocus.com/
>

---------------------------------------------------------------------------- This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service. For more information on SecurityFocus' SIA service which automatically alerts you to the latest security vulnerabilities please see: https://alerts.securityfocus.com/



Relevant Pages

  • Re: faster scans? (nmap)
    ... one host using nmap for syn scans in burst mode with the ... >>>This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: pen test help please asap
    ... > Machine A on client site makes a configurable encrypted OUTBOUND ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • Re: ettercap help
    ... Anyways have never tried Ettercap for VNC. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • RE: CFM SQL injection
    ... You should better use union or alike get unauthorized data from the ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: ettercap help
    ... > I can get it to sniff telnet, ftp, pop, smb, but no vnc. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)