Hmm,
Kind of inserted lots of complicated issues into a simple solution for a
modem for vendor support dial up
Quick solution: Purchase a modem with Firmware that allows for time based
polling, as in allows one to setup static users with dialback for certain
time during the day or certain windows.
Any modem with the latest and greatest RockWell chipset will suffice..
At 12:41 PM 10/11/00 -0400, Paul D. Robertson wrote:
>On Wed, 11 Oct 2000, Ng, Kenneth (US) wrote:
>
> > You really don't *NEED* NTP for the Ace server. I myself don't run NTP. I
> > do a 'ntpdate -d' to get the time differential, and then run a 'date -a' to
> > adjust the time if the difference is less than a few seconds. NTP
> opens you
> > up to time shifting attacks, and a possible system wide denial of service
> > attack if it ever fails for a long period of time and the time shifts off
> > more than a minute and then all of a sudden NTP fixes the time.
>
>Yep, ACE doesn't like large time shifts at all. I've seen critical
>24-hour ACE installations take 2 months to get the time back to normal.
>
> > Note: GPS opens you up to a remote attack if someone has equipment to spoof
> > the signals. The CA signal format is public knowledge. The real signal is
> > already buried in the background noise.
>
>Yep, but that's fairly easy to rectify by placing multiple stratum-1's
>around and then comparing the results. If someone's going to spoof GPS at
>multiple physical locations, you're going to have larger problems than
>time sync. You can also sheild the antenna to limit the signal to a
>fairly small look angle. It's also not that hard to set up a reciever to
>do a signal strength analysis...
>
>Paul
>-----------------------------------------------------------------------------
>Paul D. Robertson "My statements in this message are personal opinions
>[EMAIL PROTECTED] which may have no basis whatsoever in fact."
>
>PSB#9280
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
