Re: Systems not behind router/gateway

From: Knight (white_aura_knight_at_hotmail.com)
Date: 11/18/03 

Date: Tue, 18 Nov 2003 22:28:01 +0000 (UTC)

"Roy Lawson" <roy@xeon.tv> wrote in message
news:c4e77fc0.0311180907.540a42d1@posting.google.com...
> I recently started working at a company that has every last desktop
> with a public IP. In other words, no gateway/router and private
> network. We have a SonicWall firewall, but security here is a joke.
> I am the new "IT Manager" but the CFO still retains the title of "VP
> of Systems" and trumps my every move. His view is that the system has
> been like this for so long and has worked (he hasn't made the
> connection between the constantly crashing systems and viruses to no
> security yet). His background is simply from fooling around with they
> systems here.
>
> Anyways, is there a white paper out there for complete and total
> idiots explaining why we need routers and private networks? I have a
> class C subnet with nothing but desktops on it and two servers ... and
> a person who thinks that is just dandy.
>
> Oh yeah, please don't hack me :-)
>
> -Roy

Oh Dear. I would not like to be in your position. I would visit
www.securityfocus.com/ there are several scary articles in their about
attacks that have occured trough improper security practices. I would get
to the ears of the financial decision makers of the company and make them
aware of the possible financial loss, the legal requirements (depending on
your company (data protection act), and also the possiblity of legal action
against the company if their systems are used in a DDos attack of another
company. :) Scare them into your way of thinking.

Relevant Pages

  • Re: Systems not behind router/gateway
    ... >> network. ... but security here is a joke. ... > aware of the possible financial loss, the legal requirements (depending on ... > against the company if their systems are used in a DDos attack of another ...
    (comp.security.misc)
  • RE: ICMP/SYN Flood
    ... Subject: ICMP/SYN Flood ... I am experiencing a bad DDoS attack toward one of my server. ... As far as the Server security ... Unfortunately the network guys ...
    (Incidents)