[146574] in North American Network Operators' Group
Re: Have they stopped teaching Defense in Depth?
daemon@ATHENA.MIT.EDU (Jay Ashworth)
Wed Nov 16 08:37:35 2011
Date: Wed, 16 Nov 2011 08:36:21 -0500 (EST)
From: Jay Ashworth <jra@baylink.com>
To: NANOG <nanog@nanog.org>
In-Reply-To: <CAAAwwbUqkxszsC8QHkXdDFX7WQRFqLcyBv9qURARPnUaa3d7gQ@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
----- Original Message -----
> From: "Jimmy Hess" <mysidia@gmail.com>
> Or, the attack is against a legitimate user's outbound connection, for example:
> a user behind the firewall connects to a web site, a vulnerability
> in their browser is exploited
> to install a trojan -- the trojan tunnels to the attacker over an
> outgoing port that is allowed on the firewall.
Oh, certainly; I have lots of web browsers running on my servers.
All The World Is Not A Workstation, guys.
Cheers,
-- jra
--
Jay R. Ashworth Baylink jra@baylink.com
Designer The Things I Think RFC 2100
Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII
St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274
