Re: Opening up ports 139, 1494, 1604 - Am I safe?

[SGriffin]

But surely, putting company data onto the DMZ goes against the rules of DMZ
design? The servers in the DMZ cannot be trusted so data should not reside
there true?

Simon



                                                                                       
                             
                    D Clyde                                                            
                             
                    Williamson           To:     [EMAIL PROTECTED], 
"'[EMAIL PROTECTED]'"                
                    <dclydew@inte        <[EMAIL PROTECTED]>                    
                             
                    rhack.net>           cc:                                           
                             
                    Sent by:             Subject:     Re: Opening up ports 139, 1494, 
1604 - Am I safe?             
                    [EMAIL PROTECTED]                                                      
                             
                    imited.com                                                         
                             
                                                                                       
                             
                                                                                       
                             
                    08/06/2000                                                         
                             
                    15:12                                                              
                             
                                                                                       
                             
                                                                                       
                             




[EMAIL PROTECTED] wrote:

>
> Secondly most e-commerce businesses MUST open up ports from their DMZ to
> their INTERNAL servers for reasons such as database transactions say, so
> how do these people protect themselves from attack?



That isn't entirely true. Many companies export their database to a DMZ
server. Others
use message brokers to ferry information back and forth. There's always
more than one way
to do it. If push comes to shove, you may want to place your SQL stuff
in a second DMZ,
internal users can access it, external users can access it. The downside
is that it could
be compromised. The upside is that if it gets compromised, the rest of
your network is still
protected.





**********************************************************************
If you are not the intended recipient of this e-mail and have received it
in error, you are on notice that the e-mail and any attached files are
confidential. Please notify us immediately by reply e-mail and then delete
this message from your system.  Please do not use, distribute, copy or
take any action in reliance on it as to do so could be a breach
of confidence.  The sender does not accept any responsibility for any
loss, disruption or damage to your data or computer system which may occur
whilst using data contained in, or transmitted with, this e-mail.  Thank
you for your co-operation.  If you need assistance, please contact
Maritz Ltd -  tel.:  +44 (0)1628 486011 or e-mail: [EMAIL PROTECTED]
**********************************************************************
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]