RE: IIOP firewall proxy

2002-03-25 Thread Erwin Geirnaert
Hi Sylvain You can also use some kind of tunneling mechanism. I know it exists for WebSphere, the client will call a servlet on the application server, so in fact you are tunneling your IIOP in HTTP. Kind regards. Erwin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

Off-topic or not? Is your son a computer hacker

2002-01-14 Thread Erwin Geirnaert
Title: Off-topic or not? Is your son a computer hacker http://www.adequacy.org/?op=displaystory;sid=2001/12/2/42056/2147

RE: Off-topic or not? Is your son a computer hacker

2002-01-14 Thread Erwin Geirnaert
:51 To: Riley, Steven (Security); 'Erwin Geirnaert'; Firewalls (E-mail) Subject: RE: Off-topic or not? Is your son a computer hacker Another example of some wannabe journalist using hype to generate interest. First off, it's Linux not Lunix. Second, AMD is not a third-world company ripping off

RE: Ahhh, the perks of managing government networks

2002-01-10 Thread Erwin Geirnaert
Title: RE: Ahhh, the perks of managing government networks blacklisting a whole class C address isn't the solution! I mean, I am part of the 195.0.0.0 address-range.If everybody starts adding thisaccess-list to their border-routers it is over with my internet connectivity and a lot of

Admin.dll

2001-09-19 Thread Erwin Geirnaert
Title: Admin.dll Hi Looking into the analysis of the worm, I have some questions. A lot happens in the windows directory, what will happen when using win 2000 or winnt? There is no such directory. Will the worm stop? Is it possible that the changes to asp, html, exe, files are only

Borderware IPSec Client

2001-09-18 Thread Erwin Geirnaert
Title: Borderware IPSec Client Hi guys I'm having problems with the Borderware IPSec Client. If I connect trough my cable provider at home, I can connect. At work it doesn't work, although the firewall allows my PC to connect. The fw is configured to allow IP protocol 50, IP protocol 51 and

RE: Tool for Sniffer detection ?!

2001-07-12 Thread Erwin Geirnaert
Title: RE: Tool for Sniffer detection ?! Check AntiSniff from the L0pht. Erwin -Original Message- From: Steffen Schmalbach [mailto:[EMAIL PROTECTED]] Sent: donderdag 12 juli 2001 9:22 To: Firewalls Subject: Tool for Sniffer detection ?! Hi Does anybody know a good tool to

E-mail flooding

2001-06-21 Thread Erwin Geirnaert
Title: E-mail flooding Hi guys A question: a friend of mine has a problem with his mail server. It seems that a lot of mails are send from an account and they are large. Of course the account isn't aware and the mail server has relay disabled. How can we trace what is happening and how

RE: packet snooping tools for window

2001-06-21 Thread Erwin Geirnaert
2001 11:50 To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: packet snooping tools for window As I recall, the standard NT Network Monitor cannot enable promiscuous mode, whereas the one that comes with SMS can. Erwin Geirnaert [EMAIL PROTECTED] 6/14/2001 08:17:12 am For Windows you can

RE: packet snooping tools for window

2001-06-16 Thread Erwin Geirnaert
Title: RE: packet snooping tools for window For Windows you can use the Network Monitor included in NT and Windows 2000. Erwin -Original Message- From: Alex O'Neill [mailto:[EMAIL PROTECTED]] Sent: woensdag 13 juni 2001 18:16 To: [EMAIL PROTECTED] Subject: RE: packet snooping

RE: Security Related...

2001-03-05 Thread Erwin Geirnaert
Juan You need a hardware solution that can perform callback. Cisco Shiva are able to do that. Amongst other products of course. The user calls and hangs up and then the RAS calls back to the number associated with the user in the configuration. Erwin -Original Message- From: [EMAIL

RE: Reverse proxy

2001-02-15 Thread Erwin Geirnaert
Hi Or you can use an SSL accelerator box, so that you have HTTP between the SSL box and the webserver and HTTPS between the browser and the SSL box, in this way you can use an IDS like Snort on the HTTP segment and this would be a security increase. And it's also better for the performance and

RE: Auth. for mail messages

2001-02-07 Thread Erwin Geirnaert
Naor You can use S/MIME for this, create certificates using MS Certificate Server for each manager and install them in Outlook 2000. So they can sign or completely encrypt the mails. Erwin -Original Message- From: Naor Lipa To: '[EMAIL PROTECTED]' Sent: 7/02/01 9:34 Subject: Auth. for

Use of firewalls

2001-01-30 Thread Erwin Geirnaert
Hi list A question: a lot of discussions are going on about the differences between firewalls. I think that it's very important to discuss the use of the firewall Which firewall would you recommend to protect a website? For example: Watchguard can be very good as perimeter firewall for

RE: Netstat

2001-01-16 Thread Erwin Geirnaert
Peter, Netstat will just list the connections to his/her PC with certain IP-addresses. You cannot prevent this. If you use a proxy or NAT you can hide the IP of the internal server, I think that this is the reason of your question? Erwin -Original Message- From: [EMAIL PROTECTED]

RE: ping activity originating from my home machine

2001-01-09 Thread Erwin Geirnaert
This tool is only for NT and Windows 2000. You can always use Inzider or other tools. (http://ntsecurity.nu/toolbox/) Erwin -Original Message- From: Michael Thumann [mailto:[EMAIL PROTECTED]] Sent: dinsdag 9 januari 2001 15:32 To: [EMAIL PROTECTED] Subject: Re: ping activity

RE: Webtrends Security Analyzer

2001-01-05 Thread Erwin Geirnaert
platforms. But I've read some interesting things on the list about such scanners. So thanks Paul and Carric for your input. Kind regards Erwin -Original Message- From: Paul D. Robertson [mailto:[EMAIL PROTECTED]] Sent: vrijdag 5 januari 2001 14:49 To: Carric Dooley Cc: Erwin Geirnaert

RE: Webtrends Security Analyzer

2001-01-05 Thread Erwin Geirnaert
I also find it very amusing that for those who use the SecurityFocus pager (we all do, don't we, I wonder if somebody checked it for vulnerabilities ;-)) in the products section all the security scanners are listed: Retina, Cybercop Scanner, Internet Scanner, HackerShield and NetRecon Enjoy your

Webtrends Security Analyzer

2001-01-03 Thread Erwin Geirnaert
Hi list Anyone with some experience with the WebTrends Security Analyzer? Or some thoughts about it? Thanks. Erwin - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the message.]

FW: security: ssl and ssh, the Man in the Middle

2000-12-19 Thread Erwin Geirnaert
Hi guys Anyone who has some comments on this? I think that dnssniff can be used on a LAN, but on the Internet itself? http://www.securityportal.com/cover/coverstory20001218.html Erwin - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the

Privacy: blocking certain e-mail addresses

2000-10-03 Thread Erwin Geirnaert
Hi list Got this on the site of Netegrity when entering a form: We no longer accept e-mail addresses from Hotmail, Yahoo, or AOL accounts. Please go back and input your company e-mail address Very nice. Next thing you have is: I don't allow that user access because his ISP is from the

RE: Connections Watcher

2000-10-03 Thread Erwin Geirnaert
Is there a way how you can tell which process is listening to a specific port. I mean you can do netstat - a to see all active ports and you can see in the task manager which processes are running, but the link between them ? (this way it's easy to see that a specific port is used by ICQ and not

RE: Connections Watcher

2000-10-03 Thread Erwin Geirnaert
ok, but I was talking about the NT/Win platform and not the easy *nix one Erwin -Original Message- From: Angelo Neacsu [mailto:[EMAIL PROTECTED]] Sent: dinsdag 3 oktober 2000 16:22 To: Catalin Braica Cc: Erwin Geirnaert; 'Firewall Discussion List' Subject: RE: Connections Watcher

RE: Truth or Fiction

2000-09-21 Thread Erwin Geirnaert
Monitoring activity, reminds me of the joke that I received today. It monitors the activity of your mouse, so at the end of the day you have an activity report that your boss can use to pay you. (if you have a smart boss he'll reduce this activity with the status report of All Advantage ;-))

RE: DMZ and stuff

2000-08-31 Thread Erwin Geirnaert
Shiva LANRover? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Johnston, Mark Sent: donderdag 31 augustus 2000 6:40 To: [EMAIL PROTECTED] Subject: DMZ and stuff Hi, I'm looking to install a RAS server for about 5 PSTN and 2 ISDN lines. My question is

RE: ftp through CISCO access-list

2000-07-27 Thread Erwin Geirnaert
Hi Tom The problem is between active and passive modes! So make sure that you use only active mode, according to your configuration this is the only option you have to make it work. FTP in a browser uses passive mode! Or your browser uses a proxy, that can also give some problems. Don't

RE: Cisco 2501

2000-07-26 Thread Erwin Geirnaert
you have to save your current configuration you can do it with: write or copy running-config startup-config Erwin -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of AlexandreSent: woensdag 26 juli 2000 16:17To: [EMAIL PROTECTED]Subject:

RE: ISDN win98 secureID

2000-07-12 Thread Erwin Geirnaert
Title: ISDN win98 secureID maybe it's a problem with the PPP configuration and has it nothing to do with the ACE server or maybe you have to install the latest drivers for 98 for PPP, there were a lot of problems with the older versions I know that the latter gave problems for PPTP Erwin

RE: more on the free firewalls book

2000-05-26 Thread Erwin Geirnaert
Only if you're in the US or Canada :-( BTW very easy questions! Erwin Apologies to all, and thanks to HML for pointing it out. The book ofer URL is listed here. I triple checked before sending. Watch word wrap. Steve http://www.cisco.com/pcgi-bin/lm/buffer/offer/securitysolution

Bandwith measuring

2000-05-26 Thread Erwin Geirnaert
Hello all I saw a website with a button where you are able to measure your bandwith from your workstation to there server. I am really interested how this can be done using only HTTP (I asume they only use HTTP, because a firewall wouldn't allow incoming ICMP packets) Or is it just a little

RE: firebox II

2000-05-26 Thread Erwin Geirnaert
Just ran across (not over) a FireBox II, would anyone care to comment on its usefulness? it's from Watchguard (www.watchguard.com) and it's a good firewall for its price. ( I think it's 5000$). It has a Linux based OS, the logging station is NT based. You can do remote administration using

Differences in security solutions

2000-03-08 Thread Erwin Geirnaert
Hi I'm looking for an article or a white paper where the difference in security-products from different vendors is discussed on matters of performance, 'security', price, ... Doesn't need to be just about firewalls (that would also be very interesting for everybody I think), may be about

RE: Load balancing.......

2000-02-25 Thread Erwin Geirnaert
Folks, Any idea or best solution how to do the following: 1 - To have connectivity to two different isp. 2 - Be able to use only one firewall (checkpoint) 3 - One connectivity via a T1 and the second via a DSL 4 - This should be transparent to the users. Maybe a Cisco router