Re: Stripped out system for browsing
From: John Elsbury (johne@snospam.sovereign.co.nz)
Date: 11/29/02
- Next message: Rohit Dhawan: "Looking at the typed password"
- Previous message: JayMore: "Re: How to do HTTP authentification "digest" method ?"
- In reply to: craig: "Stripped out system for browsing"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: johne@snospam.sovereign.co.nz (John Elsbury) Date: Thu, 28 Nov 2002 23:15:11 GMT
On 28 Nov 2002 12:15:09 -0800, craig.athome@virgin.net (craig) wrote:
>Hi Security folks,
>
>Hope you don't mind me drawing on your vast knowledge again. You've
>never failed me yet! At work we are going to set up a physically
>seperate network (from our main LAN) for web browsing.
>
>I would like to use severely minimized systems for this - no
>unneccesary applications or functionality. Anyone know of a good
>resource covering such an approach, or have any advice ? I'm not much
>of a Linux user yet, although I'm trying to find time to be! but I was
>thinking Linux might be a good bet.
>
>Any advice gratefully recievied...
Why bother? If there is an air gap between this network and your LAN
then who cares if the PCs get trashed - just make Ghost images before
you deploy them and then, if they get a virus (or whatever), then
rebuild from scratch.
You still want to have them inside a firewall, though, so that if any
gets compromised - say, somebody sets up a mail relay on one of them -
then you don't go blasting out spam from your IP range - this will get
you into all sorts of strife. Just allow http and nntp traffic
through for surfing, webmail, and newsgroups.
You may want to set the PCs up without recordable media (no diskettes
or CD writers/readers, no USB ports, no parallel ports, no serial
ports) to minimise the chances of information flowing in or out, and
arriving in / being stolen from your LAN.
- Next message: Rohit Dhawan: "Looking at the typed password"
- Previous message: JayMore: "Re: How to do HTTP authentification "digest" method ?"
- In reply to: craig: "Stripped out system for browsing"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
