Re: What to buy?



Correct.

What to "buy" is the manual for your firewall and router.

Plus there are many online resources.

Some free:
http://lartc.org/howto/
http://tldp.org/HOWTO/Firewall-HOWTO.html

Some not free:
http://www.cisco.com/web/learning/index.html

-Mike

On 2/22/2011 1:34 PM, David Gillett wrote:
With IPv4 space practically exhausted, your users should probably be on a
private range (per RFC 1918) with NAT or PAT at your gateway. So their IP
addresses won't do an outsider any good. Similarly, MAC addresses aren't
visible (or usable) past any router, so the only people who could exploit
them are already inside your network.

So far as I can tell, the most common way people get "hacked" on FaceBook
is that someone steals their PASSWORD, not their IP address. Read up on
"Firesheep" to see how easy that has been; theoretically, at least, users
can now protect themselves by using HTTPS instead of HTTP to connect to FB.

Books: I'd suggest starting with CCNA-level coverage of TCP/IP, and Ross
Anderson's "Security Engineering".

David Gillett, CISSP CCNP


-----Original Message-----
From: Just1n [mailto:hotpackets@xxxxxxxxxxxxxx]
Sent: Sunday, February 20, 2011 16:22
Cc: recipient list not shown:
Subject: What to buy?

Hows it going security gurues.

My job is now taking on the security responsibilityes for my network. We
have nearly 250 pcs on the network and theres about 30 macs too (ugh). I was
just doing the network before this but the security guy got fired on the
weekend after getting caught with drugs.

My boss wants to stop people being able to post their IP number on the
internet. I was telling him that you have to worry about the MAC numbers
getting posted too, otherwise you can get hacked using them if the hackers
get those numbers. Most people dont really know thats how you can get hacked
on facebook or some of the forums (especially php forums).

If I wanted to buy something to block these getting posted, what would be
the best? Or should I look into doing it myself with linux?? Any good books
you think I should read about this?

Thanks in advance,
Justin


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we
examine the importance of Apache-SSL and who needs an SSL certificate. We
look at how SSL works, how it benefits your company and how your customers
can tell if a site is secure. You will find out how to test, purchase,
install and use a thawte Digital Certificate on your Apache web server.
Throughout, best practices for set-up are highlighted to help you ensure
efficient ongoing management of your encryption keys and digital
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727
d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------




------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------