Re: Are you protected by NAT?

From: Michael (mvlonden@_nospam_kabelfoon.nl)
Date: 06/13/02 

From: Michael <mvlonden@_nospam_kabelfoon.nl>
Date: Thu, 13 Jun 2002 22:05:31 +0200

Like I said ALMOST impossible. And if somebody is dumb enough to
download something that's suspious or misconfigured his firewall, that's
a different story.

If you configured your firewall right, protect your network from trojans
and viruses, go to save websites and it's unknown which firewall you
have, than what's the chance that you get hacked?

Why should a hacker hack an unknown individual, when a compgany,
university or departmant is more of a challange?

Michael

"L. Walker" wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Wed, 12 Jun 2002, Michael wrote:
>
> > Beside NAT, you can also use anti-spoofing, which makes it almost
> > impossible to get on your local network.
>
> Correction: "Impossible to get on your local network from an external
> address" - We've just debated our arses off about this. We know that you
> can get in if either you run malicious code on the local network (callback
> code, connects to the attacker instead of attacker connecting to victim)
> or if the firewall+NAT+Port Forwarding is misconfigured, or if the
> NAT/Firewall has a bug in it of some kind allowing us to do whatever we
> ant, etc etc etc...
>
> Maybe I should start a thread asking people to discuss their techniques
> for bypassing firewalls/ACLs :P
>
> - --
> L. Walker
> BOFH Excuse #338: old inkjet cartridges emanate barium-based fumes
> - --
> If one wants to be a policeman, one must learn how to be a thief.
> - --
> That's why we spend so much time trying to understand our own motivations
> and those of others. That's what makes life so interesting.
> Kaji, Evangelion Ep 18
> - --
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.6 (GNU/Linux)
> Comment: For info see http://www.gnupg.org
>
> iD8DBQE9CK2bBJ6saYuOFLgRAmZ3AJ9MWHGYXccbbAs5gOkMCf3RjOx8lACfb+tJ
> /ZmwMXXwgHwJV0Tl1rds7l0=
> =O349
> -----END PGP SIGNATURE-----

Relevant Pages

  • Re: Are you protected by NAT?
    ... If you configured your firewall right, ... >> impossible to get on your local network. ... > can get in if either you run malicious code on the local network (callback ... connects to the attacker instead of attacker connecting to victim) ...
    (comp.security.firewalls)
  • [hardware] gigabit firewall
    ... I need some help finding the right hardware for a gigabit firewall. ... mixed 100/1000 MBit backbone ... in the local network ... I just measured the current packets/sec and packet sizes on ...
    (comp.security.firewalls)
  • Re: Local Network or Internet?
    ... You shouldn't make any changes in your router, since its firewall is ... designed to keep the Internet out, not the local network. ...
    (microsoft.public.windowsxp.network_web)
  • Is SP2 a Disaster for XP and Local Networks?
    ... not a smooth transition with respect to my local network and firewall capabilities. ... firewall, Norton's Nav, Mozilla browser/mailer, spybot and flying along pretty well. ... reach my other two computers on my local network. ... Wayne T. Watson (Watson Adventures, Prop., Nevada City, CA) ...
    (microsoft.public.windowsxp.network_web)
  • Re: Network not present or not started
    ... computers/directories my side of the firewall on the Local Network. ... I've actually solved the problem by doing a full scale repair on the Windows ... > | Outgoing mail is certified Virus Free. ...
    (microsoft.public.win2000.setup)