*BSD News Article 56193


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!newsroom.utas.edu.au!munnari.OZ.AU!spool.mu.edu!howland.reston.ans.net!newsfeed.internetmci.com!news.sprintlink.net!gryphon.phoenix.net!phoenix.phoenix.net!pflores
From: pflores@phoenix.net (Paul Flores)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: Internet Gateway Security
Date: 30 Nov 1995 11:49:01 GMT
Organization: Phoenix Data Systems
Lines: 39
Distribution: world
Message-ID: <49k5nd$4uc@gryphon.phoenix.net>
References: <4928bq$8o3@news2.ios.com> <493pu7$7gs@atlas.uniserve.com> <49i19b$m84@buffnet2.buffnet.net>
NNTP-Posting-Host: phoenix.net
X-Newsreader: TIN [version 1.2 PL2]

: Tom Samplonius (tom@uniserve.com) wrote:
: : >Hi everyone,
: : >
: : >Perhaps you may assist me with this question.
: : >
: : >Currently, we have a Novell 3.11 network running and we want an
: : >Internet Server Gateway to provide the users internet access.
: : >
: : >If I install the Internet Server onto the ethernet backbone thus
: : >becoming part of our Novell network, would hackers be able to hack
: : >into our Novell network and workstations??
: : >
: : >Is our Novell network safe? Do we need to install a firewall on the
: : >internet server?

: :   Probably not.  Most Novell setups use IPX.  The Internet uses TCP/IP.  Since 
: : your server only knows IPX, no one on the Internet can touch it.


: I dissagree - if any machine on your lan runs BOTH IPX and tcp/ip the 
: cracker would need only crack that machine, and then use it to crack 
: other ipx/novell boxes.

Hmmm, as long as FTPs into your machines are denied(Something your router 
should be able to do), there 
isn't a WHOLE lot one can do to a PC running windows, OS/2 or a MAC. :>




Also, if you are running IP TUNNELING for Netware, your server is VERY 
open for attack, But you would only be running this if you were using the 
'Net as a medium to connect users to a netware login...

-----
"I've Always been easy, just never cheap!"
      ------

ME!