Re: A story and some advice.

2001-04-28 Thread Derek Martin
On Wed, Apr 25, 2001 at 01:57:14PM -0400, Brad Maxwell wrote: OK, I'm not just an innocent victim and I'm responsible for putting my high performance sports car on the net but M1/ATT owns the highway and they certainly have capabilities and facilities that far outstrip what I have on my

Re: A story and some advice.

2001-04-28 Thread James R. Van Zandt
Alex Hewitt USG [EMAIL PROTECTED] writes: Greg, the best advice that you will get from me and others who frequent this group is to invest in a firewall/router box. I use the LinkSys BEFSR41 which has 4 10/100 ports but there are several other manufacturers of these devices. They cost around

Re: A story and some advice.

2001-04-28 Thread Derek Martin
On Wed, Apr 25, 2001 at 12:13:43PM -0500, Mansur, Warren wrote: I suppose everyone has a different opinion on this, so I figure I might as well share mine :-) If a thief breaks into my car, and then uses it to run over and kill 10 people, am I responsible for the death of those 10 people?

Re: A story and some advice.

2001-04-25 Thread Greg Kettmann
Hey, I'm in. Just give me some warning and I'll cancel all business trips. Hey, I'll even be happy to talk about what NOT to do :-) Mark Komarinski wrote: Another vote. I can demonstrate Coyote Linux (single floppy Linux firewall) and maybe bring along my SMC Barricade box for demo as well.

Re: A story and some advice.

2001-04-25 Thread cdowns
PROTECTED]; [EMAIL PROTECTED] Subject: Re: A story and some advice. Folks: First, I really appreciate all the feedback. Most has been excellent. About the only area that I fundamentally disagree with is sort of the combination it's my fault / M1 - ATT is doing OK. Yes, I accept my share

Re: A story and some advice.

2001-04-25 Thread Mark Komarinski
others :-) -Warren -Original Message- From: Greg Kettmann [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 25, 2001 12:42 PM To: David Roberts Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: A story and some advice. Folks: First, I really appreciate all the feedback

Re: A story and some advice.

2001-04-25 Thread Benjamin Scott
On Wed, 25 Apr 2001, Greg Kettmann wrote: Yes, I accept my share of the responsibility but I really, REALLY think that M1/ATT, who have the resources, should be doing something to try to actually go after the crackers. What do you suggest they do? What makes you think they have the

Re: A story and some advice.

2001-04-25 Thread David Roberts
[EMAIL PROTECTED] wrote: [EMAIL PROTECTED] writes: The box isn't really more secure than Linux, its just that there's fewer things to go wrong - and if someone does have an exploit for a firmware bug, its usually fixed with the next powercycle. It would be an equivalent to running

Re: A story and some advice.

2001-04-25 Thread Paul Lussier
In a message dated: Wed, 25 Apr 2001 12:13:43 CDT Mansur, Warren said: If a thief breaks into my car, and then uses it to run over and kill 10 people, am I responsible for the death of those 10 people? The police may at first suspect me because my car was used, but as soon as they find out my

Re: A story and some advice.

2001-04-25 Thread Bill Sconce
[EMAIL PROTECTED] wrote: [EMAIL PROTECTED] writes: The box isn't really more secure than Linux, its just that there's fewer things to go wrong - and if someone does have an exploit for a firmware bug, its usually fixed with the next powercycle. It would be an equivalent to running

Re: A story and some advice.

2001-04-25 Thread Benjamin Scott
On Wed, 25 Apr 2001, mike ledoux wrote: can and you keep on top of it. If you don't want your salami to be used to bludgeon someone to death, make sure people with the malicious intnet can't at it. So lock up your salami dammit :) Salami wants to be free. Open Source salami? I

RE: A story and some advice.

2001-04-25 Thread Lawrence.Tilly
:[EMAIL PROTECTED]] Sent: Wednesday, April 25, 2001 1:14 PM To: Greg Kettmann; David Roberts Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: A story and some advice. I suppose everyone has a different opinion on this, so I figure I might as well share mine :-) If a thief

OT: Safe Salami [ was Re: A story and some advice.]

2001-04-25 Thread Paul Lussier
In a message dated: Wed, 25 Apr 2001 14:23:26 EDT Tilly, Lawrence said: Ok...WAY out of context, but I think THAT would make for an interesting bumper sticker Lock up your salami, dammit! I knew that statement would get some attention, any one .sig'ed me yet ;) -- Seeya, Paul

Re: A story and some advice.

2001-04-25 Thread Greg Kettmann
Folks: First, I really appreciate all the feedback. Most has been excellent. About the only area that I fundamentally disagree with is sort of the combination it's my fault / M1 - ATT is doing OK. Yes, I accept my share of the responsibility but I really, REALLY think that M1/ATT, who have

Re: A story and some advice.

2001-04-25 Thread ccb
I'm confused here. Isn't that what Linux is supposed to do with IP* (name of the month)? Yes. Why is this box more secure than Linux? Not necessarily so. It's less complex than linux. It is not actually running any services, with the exception of an embedded web browser if you allow

Re: A story and some advice.

2001-04-25 Thread Benjamin Scott
On Wed, 25 Apr 2001, Mark Komarinski wrote: I can demonstrate Coyote Linux (single floppy Linux firewall) ... This I would be more interested in. I can get a dedicated SOHO firewall at Staples. Finding the time to check out something like Coyote is harder. :-) -- Ben Scott [EMAIL

Re: A story and some advice.

2001-04-25 Thread Bobnhlinux
[EMAIL PROTECTED] writes: The box isn't really more secure than Linux, its just that there's fewer things to go wrong - and if someone does have an exploit for a firmware bug, its usually fixed with the next powercycle. It would be an equivalent to running something like the Linux Router

RE: A story and some advice.

2001-04-25 Thread Brad Maxwell
12:42 PM To: David Roberts Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: A story and some advice. Folks: First, I really appreciate all the feedback. Most has been excellent. About the only area that I fundamentally disagree with is sort of the combination it's my fault / M1 - ATT

Re: A story and some advice.

2001-04-24 Thread Kenneth E. Lussier
Greg Kettmann wrote: Well, I talked to their legal department, a million times better than their security department and it appears we can work something out. So, my purpose here is two things. One, to vent a little (thanks :-) ) and two to ask about known vulnerabilities. My machine is

Re: A story and some advice.

2001-04-24 Thread Kenneth E. Lussier
I don't know about that. I seem to remember a certain ADSL company saying that their ADSL routers were impervious to penetration. Until about two weeks ago, that is ;-) Besides, why spend the money when it can all be done for free, and an added advantage is that you can learn a little bit

Re: A story and some advice.

2001-04-24 Thread ccb
For someone like Greg that isn't going to ride herd on his environment nightly, I'd recommend dropping a whopping $125 on an appliance from LinkSys, SMC, DLink or NetGear. Filter out everything and check your vendor's web site weekly for updates. I did my own IPMasq/IPChains Linux box for a

Re: A story and some advice.

2001-04-24 Thread Mark Komarinski
Hi Greg, Check out Smoothwall (www.smoothwall.org). It's built for doing firewalling, and has web interfaces for setting everything up. Firewalls don't need to be all that powerful, so a lightweight firewall config is going to be best for you. -Mark Greg Kettmann wrote: I'm an Architect,

RE: A story and some advice.

2001-04-24 Thread Brad Maxwell
He did say he was an Architect == PHB? ;-) -Original Message- From: Kenneth E. Lussier [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 24, 2001 4:57 PM To: Alex Hewitt USG Cc: Greg Kettmann; [EMAIL PROTECTED] Subject: Re: A story and some advice. I don't know about that. I seem

Re: A story and some advice.

2001-04-24 Thread Bobnhlinux
In a message dated 4/24/2001 4:48:27 PM Eastern Daylight Time, [EMAIL PROTECTED] writes: Greg, the best advice that you will get from me and others who frequent this group is to invest in a firewall/router box. I use the LinkSys BEFSR41 which has 4 10/100 ports but there are several

Re: A story and some advice.

2001-04-24 Thread Kenneth E. Lussier
Greg, If you still have any, I would like to see what the logs look like. This would be a big advantage in figuring out where you went wrong the first time, and invaluable in preventing the same mistake from being made again. Kenny Greg Kettmann wrote: I'm an Architect, which means I

Re: A story and some advice.

2001-04-24 Thread Ray Cote
At 2:56 PM -0400 4/24/01, Greg Kettmann wrote: Also, one other vent. I wish those jerks at M1, instead of pulling the plug on my account, would first trace the darn thing and go try to catch the bad guy instead of harassing their customers. Then they can pull the plug and give me a chance to

RE: A story and some advice.

2001-04-24 Thread Mansur, Warren
(mine's a Linksys DSL/cable router but there are others available). -Warren -Original Message- From: Hewitt, Alexander Sent: Tuesday, April 24, 2001 4:48 PM To: Greg Kettmann Cc: [EMAIL PROTECTED] Subject: Re: A story and some advice. Greg, the best advice that you will get from me