[rescue] roadrunner

Andrew Weiss ajwdsp at cloud9.net
Tue Mar 18 16:41:51 CST 2003


Yes I'd have to say running NT as a router is kind of asking for it.

It's true if IIS is disabled that's 90% of the battle but why not just 
use something like a Sparcstation 2 or other.  I use a Powermac 8100 
running Linux so it's double obscure... and then the only external port 
that answers incoming requests is ssh.  Then for overkill I run ssh 
internally on the locally NAT'ed network...i.e. the only boxes that 
have telnet open are blank and waiting for ssh to be installed... one 
AIX box and one HP-UX box.

Andrew

On Tuesday, March 18, 2003, at 04:46  PM, Joshua D. Boyd wrote:

> On Tue, Mar 18, 2003 at 04:35:41PM -0500, Sheldon T. Hall wrote:
>
>> Given the number of port-scan and crack attempts we saw, I wasn't 
>> about to
>> plug in anything remotely useful to the haxors.  A stripped-down NT 
>> box is
>> pretty useless, even if they crack it.  They can knock it over, but 
>> they
>> can't use it for much.
>
> Not if they can get their own executables installed on it.  Then a
> cracked NT box can be quite harmfull to the net at large.
> _______________________________________________
> rescue list - http://www.sunhelp.org/mailman/listinfo/rescue


More information about the rescue mailing list