RE: NAT, Internet access and security

From: David McGovern (dmmcgove@hotmail.com)
Date: 01/10/02 

From: "David McGovern" <dmmcgove@hotmail.com>
To: security-basics@securityfocus.com
Date: Thu, 10 Jan 2002 14:20:50 -0500

Being that FTP is one of the most insecure protocols, it might be a better
idea to use ssh.

Just a thought.

-Dave

>From: "Thomas M. Welch" <twelch@samcrc.com>
>To: "Kartik Trivedi" <kvt@eudoramail.com>, "irado furioso com tudo"
><irado@nettaxi.com>
>CC: <security-basics@securityfocus.com>
>Subject: RE: NAT, Internet access and security
>Date: Tue, 8 Jan 2002 17:58:23 -0600
>
>No Problem...
>
>Just map port 21 (assuming you are using port21) to your internal redhat
>box running the ftp daemon.
>
>It is also called port forwarding. When a FTP request comes to your
>router over port 21 your router will forward that request to the
>internal machine you specify.
>
>Hope this helps.
>-Tom
>
>
>
>-----Original Message-----
>From: Kartik Trivedi [mailto:kvt@eudoramail.com]
>Sent: Tuesday, January 08, 2002 5:05 AM
>To: irado furioso com tudo
>Cc: security-basics@securityfocus.com
>Subject: Re: NAT, Internet access and security
>
>
>hey guys,
>
>Any idea how can i run an FTP server behind a NAT.
>
>I share DSL connection with my roommates using a router. But i want to
>connect to my machine (RH Linux 7.2 which has an ftp daemon running)
>from outside.
>
>Any idea?
>
>Thanks
>-neo
>----- Original Message -----
>From: "irado furioso com tudo" <irado@nettaxi.com>
>Cc: <security-basics@securityfocus.com>
>Sent: Monday, January 07, 2002 3:46 AM
>Subject: Re: NAT, Internet access and security
>
>
>surelly, I am missing something. In a widely open network as this, how
>can it be secure ??
>
>
>
>Iain McAleer wrote:
>
> > Hey guys,
> >
> > To be honest, if your system is secure a firewall is redundant. I am
> > aware of a company here in Perth that is part of a multi-million
> > dollar corporation. They have NO firewalls in place and are not
> > implimenting NAT. Infact they have live IP's for all their
> > workstations. The reason they
>have
> > no firewall and can keep running with this is because their system is
> > secure. The biggest security risk is always going to be exploits and
> > your own clients idiocy.
> >
>
>
>
>
>saudações,
>
>Irado Furioso com Tudo
>Linux (SuSE) User 179402
>se abrirem as portas de *todas* as prisões, os roubos ainda serão em
>menor volume do que os de nossos políticos. Na verdade, mal
>perceberíamos a diferença (think about)!.
>
>
>

_________________________________________________________________
MSN Photos is the easiest way to share and print your photos:
http://photos.msn.com/support/worldwide.aspx

Relevant Pages

  • Re: EBS 2008, TMG and external firewall. Dont want double NAT
    ... This is done because Exchange is bound to the internal interface and leaves the external interface to be *completely* controlled by TMG...a good security guideline by the way. ... If you are disabling NAT then you'll need to change this from a publishing rule to an access rule, but it should still work fine. ... The first is an access rule allows traffic from the internal IP to the external interface and to the messaging server ... One of the default rules is an "internet access for all users" that allows http and https by default. ...
    (microsoft.public.windows.server.sbs)
  • Re: Cable Vs. DSL
    ... Well, its likely that he is using a Linksys or D-link NAT enabled router, ... >>is what the clients are seen to have from the internet. ... >security measure, it's merely a way to broaden the available address ...
    (Security-Basics)
  • Re: How exposed am I?
    ... > addition to NAT? ... For a small business solution, you may want to look at a WatchGuard FW ... I don't think you can take security on the Internet lightly in today's ...
    (comp.security.firewalls)
  • Re: Open Ftp on AS/400
    ... Static NAT is only slightly better than no protection at all - ... PIX does both. ... FTP sends clear-text user-id and passwords - make sure at least ... connecting to the Internet with little or security considerations ...
    (comp.sys.ibm.as400.misc)
  • Re: Does IPv6 preclude use of a NAT gateway?
    ... the reason NAT works for IPv4 that I have been taught is the ... 192.168.xxx.xxx are illegal on the actual internet. ... sends the envelope to your router. ... security in a small home or office. ...
    (Debian-User)