Hi,
As my previous email, there is no way you can 'hide' the firewall external interface
IP Address. It is generally an acceptable practice with a good comfort level to have
this in real world. There are something you can do :
1) Obscure the DNS name for firewall e.g. don't assign a DNS name like
'Dallas-FW-Ver3.x'
2) Use stealth connection - Drop every connection attempt to your firewall, this
supposed to make your firewall stealth.
3) Carefully check your security policy to make sure there is no gap / unintended
holes.
4) Use AntiSpoofing.
etc.
Having said that, the social engineering, that exploit regular computer users' panic,
that really matters in the advertisement.
Regards,
Leonard Ong, CISSP, CSS-1, CCSE, MCSE,
MCDBA, CCNP, CCDP, NSA, LCP
Network Security Specialist, APAC
NOKIA
Email. [EMAIL PROTECTED]
Mobile. +65 9431 6184
Phone. +65 6723 1724
Fax. +65 6723 1596
