RE: Modem Security

From: Hiemstra, Brenno (brenno.hiemstra@ignite.nl)
Date: 06/10/02


From: "Hiemstra, Brenno" <brenno.hiemstra@ignite.nl>
To: "'Chris Berry'" <compjma@hotmail.com>, security-basics@securityfocus.com
Date: Mon, 10 Jun 2002 11:18:44 +0200

There are different ways to use it I think.

First you need to determin if the modem only
needs to dial out of into your network. If the
modem is only used to dial out to the legacy
system of your network then configure the modem
to only allow dial-out.

If you need to use the modem to dialin from an
external network or computer then you have
several ways. You can isolate the computer
behind a firewall but like you said you then need
to allow a lot of ports that will result in an pretty
open rulebase.

You can also have some secure way of authenticating
once the user has dialed in. RSA tokens or something
like that may be an solution.

These are just a few ideas, I bet there are more

Regards,

Brenno

> -----Original Message-----
> From: Chris Berry [SMTP:compjma@hotmail.com]
> Sent: vrijdag 7 juni 2002 20:08
> To: security-basics@securityfocus.com
> Subject: Modem Security
>
>
>
> I think I've got my internet connection security coming together, but
> I'm worried about a potential back door. I have one worker who absolutely
>
> has to have a modem to contact the legacy system our billing service
> uses. What bothers me is that someone might get clever and use a war
> dialer to find this number and try and hack their way around my secure
> gateway. I'd like to make this more difficult or at least have some way
> to contain the damage. Does anyone have any ideas? I thought of possibly
>
> putting a linux box configured as a firewall between her and the rest of
> the network, but I'd have to have alot of ports open to allow all the
> services she'll need so I don't know if that would even help much.



Relevant Pages

  • Cant get home network working?
    ... Have run Network Setup Wizard on both, also enabled "Share this folder on ... Ping statistics for 212.159.8.238: ... Caption = Sony Ericsson Device 125 USB WMC Data Modem ...
    (microsoft.public.windowsxp.video)
  • Re: Cant get home network working?
    ... Have run Network Setup Wizard on both, also enabled "Share this folder on ... Ping statistics for 212.159.8.238: ... Caption = Sony Ericsson Device 125 USB WMC Data Modem ...
    (microsoft.public.windowsxp.video)
  • Network only working one way?
    ... Have run Network Setup Wizard on both, also enabled "Share this folder on ... Ping statistics for 212.159.8.238: ... Caption = Sony Ericsson Device 125 USB WMC Data Modem ...
    (microsoft.public.windowsxp.network_web)
  • Re: Internet Sharing
    ... Sharing in the Sharing System Prefs pane. ... How do I get other Macs on the same LAN to use that shared internet ... The problem is that you already have a router on your network - the ... broadband modem. ...
    (uk.comp.sys.mac)
  • Re: Need Help on setting up a small home site.
    ... change it to suit however your network is set up. ... > the one that connects to the modem. ... > anhhung.dyndns.info still points to the website of the modem ... I obtain my IP address from ISP. ...
    (comp.infosystems.www.servers.unix)