Eric wrote:
> [Someone shafted his brother's network]

Solution:
1. Fire the consultant and do the work yourself; from
   what I can make out you have a much better perception 
   of what is safe and not.
2. Reapply your router access lists
3. Do NOT install RAS on your firewall!
4. Yes, you have two DNS servers running. One is listening
   on port 53 UDP and answering normal questions. The other
   is listening on port 53 TCP and is handling your zone 
   transfers (and ls -d commands). Yuck :-)

I suspect you'll get twenty or so answers telling you
the exact same thing, but these were my $.02 to add
to the pile.

Regards,
/Mike

-- 
Mikael Olsson, EnterNet Sweden AB, Box 393, S-891 28 �RNSK�LDSVIK
Phone: +46 (0)660 105 50           Fax: +46 (0)660 122 50
Mobile: +46 (0)70 248 00 33
WWW: http://www.enternet.se        E-mail: [EMAIL PROTECTED]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to