OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: RE: hacking the system
From: Vincent de Lau (Vincent.de.Lautridion.com)
Date: Fri Aug 18 2000 - 03:19:30 CDT

> 2) Question ..
> I would think opening up the MS SQL port across the Internet
> is dangerous - what
> are some thoughts on having a database port open on the
> Internet? I know it
> scares me - but it would provide a answer to a problem that I
> may have to solve
> soon.
>

Maybe a good idea to use a VPN? We run a lot of services (Exchange, NT
Domain, Backup software) accros a VPN, The offices are interconnected using
VPN's acros the internet, and home users can also setup a VPN. Only then you
are allowed (and able, because of Private IP space) to access resources
behind the firewall.

You should make sure that you can access the desired subnet over the VPN. I
encountered a problem when it tried to access servers in the DMZ because
traffic that comes over the VPN is trown out on the trusted network, and
can't route back.

Vincent de Lau
 System Administrator / MSCE

 Tridion (http://www.tridion.com)
 mailto:Vincent.de.Lautridion.com

-
[To unsubscribe, send mail to majordomolists.gnac.net with
"unsubscribe firewalls" in the body of the message.]