4. A firewall is a firewall.  You can setup rules for either interface.
Since this server is a hosting a web site as well, I assume he requires
FTP access to modify his web content.  Regardless, most firewalls are
only layer 4 aware and thus allow you to only close or open ports for
access; they do not care what traffic you are passing on those ports.
Some sort of IPS system is required to analayze traffic on layers 5-7
and mitigate attacks as they are occuring.

5. Actually, in this day and age there are so many script kiddies and
automated bots probing the net, it is something to *ignore competely* if
your servers are secured properly.  Rename administrator user to
something else, setup a dummy administrator account, disable it, and
give it an extremely rediculous password.  And never worry about it
again.  You can't bruteforce an account that is disbaled and has no
privledges.  

-Jay

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists)
Sent: Monday, April 03, 2006 5:14 PM
To: [email protected]
Subject: RE: [IMail Forum] OT - MSFTPSRV

> 4. The server is behind a firewall.

To me, the public side of a firewall means the Internet side or WAN side
or
what ever else you would want to call it but it means not behind the
firewall. If he means on the DMZ side of the firewall he should have
said
so.

> 5. Apparently it is throwing up some red flags, because he bothered to
> post a question asking for help here.

Yes, some red flags but my point is it should be throwing a lot bigger
flag
than he is saying. Some one constantly attempting to use the
administrator
account is a urgent problem, not just something to look into.

John T
eServices For You

"Seek, and ye shall find!"


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to