LinuxSA Mailing list archives

  From: Andrew Reid <andrew.reid@plug.cx>
  To  : Evan Bourlotos <evan@cs.adelaide.edu.au>
  Date: 31 May 2001 10:22:05 +0930

Re: Netscape problem

On 31 May 2001 09:10:42 +0900, Evan Bourlotos wrote:

> True, but it depends on the level of paranoia.

Paranoia is a good thing when it comes to Internet security.
Unfortunately, you're rather susceptable to nasties without it.

> We have router-- f/w --- switch -/ Proxy
> Im on the switch so I go to firewall as my gateway all others go thru the
> proxy.

Pitty about all the other people :-)

> plus f/w is kinda tight 2 ports open for incoming mail web thats it. All
> out going is allowed so it isnt a real issue for us because its mainly IT
> who have the access to anything more than a browser.

What if I were to walk in with my Laptop and claim to be someone from
Telstra. All I have to do is find a network point, configure my NIC and
type the command 'wget -br ftp://mirror.aarnet.edu.au/pub/'

That's really going to hurt your bandwidth bill.

> But of course known exploits through these kinda hurt anyway.

Just because '...it's mainly IT who have access to anything more than a
browser.' don't think that you're not going to be a nice target for an
exploit.

Adelaide University has a rather nice Internet connection, I believe.
I'd really like a local copy of AARNet on my local drive(s).

   - andrew

-- 
Andrew Reid                   email: andrew.reid@plug.cx
                              www:   http://www.plug.cx
"A school without students    phone: +61 401 946 813
 is like an ointment
 without a fly"

-- 
LinuxSA WWW: http://www.linuxsa.org.au/  IRC: #linuxsa on irc.linux.org.au
To unsubscribe from the LinuxSA list:
  mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject