[SunHELP] sshd2 - remote connection

[sunhelp at sunhelp.org]

OK, this sounds like you are hacking your own company. Don't blame me if you
get fired, but what I suggest is running nmap against your outside interface
from both the inside and outside. This will reveal all the open ports and
conduits. Just a warning, if you were doing this in my company you would be
made to "walk the plank" (in other words, you would be fired), and yes, we
would notice the hacking attempts.

James Fogg, Network Engineer
Vicinity Corporation - New Hampshire
(603) 442-1751

~ -----Original Message-----
~ From: Markham, Richard [mailto:RMarkham at hafeleamericas.com]
~ Sent: Wednesday, February 20, 2002 4:38 PM
~ To: 'sunhelp at sunhelp.org'
~ Subject: RE: [SunHELP] sshd2 - remote connection
~ 
~ 
~ ill clarify
~ 
~ 1) External = outside the firewall
~ 2) Internal = inside the firewall
~ 
~ things are working between this external server and the 
~ internal network
~ since 
~ there are rules in place within our pix firewall.
~ 
~ overall goal here is to find and document what security 
~ measures are in
~ place on 
~ the external server in regards to the outside world.  In my 
~ own testing I
~ see that 
~ is blocking ICMP from the outside world and also the running 
~ services such
~ as proftpd 
~ and ssh2 are blocked (outside world only). I found that this 
~ blocking is not
~ part of 
~ these two service's configurations, nor the presence of the 
~ software base
~ firewalls 
~ I previous listed.  Sorry that I haven't been very thourough on my
~ descriptions.
~ I will check into your suggestion.
~