[40018] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: telnet vs ssh on Core equipment , looking for reasons why ?

daemon@ATHENA.MIT.EDU (up@3.am)
Tue Jul 31 10:43:19 2001

Date: Tue, 31 Jul 2001 10:42:39 -0400 (EDT)
From: <up@3.am>
To: nanog@merit.edu
In-Reply-To: <Pine.LNX.4.21_heb2.09.0107311714200.1792-100000@fireball.tau.ac.il>
Message-ID: <Pine.BSF.4.10.10107311040240.72706-100000@richard2.pil.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu


On Tue, 31 Jul 2001, Ariel Biener wrote:

> 
> On Tue, 31 Jul 2001, Stephen J. Wilcox wrote:
> 
> > *ponder*
> 
> But who said I am not on your network ?  What if I penetrated your AAA
> server, or, some other server on your network ?

if this is done, you may well already be f*cked, but not neccessarily
because of "sniffing" or "injecting ARP entries", all of which can be
prevented by a decent switch with VLANs, and for more protection, static
port ARP entries.

> And what about those that administer their networks from remote locations
> > 
> > how will that work, you're not on my network and my routers wont forward
> > local packets to you?
> > 
> > Steve
> > 
> > On Tue, 31 Jul 2001, Ariel Biener wrote:
> > 
> > > On Tue, 31 Jul 2001, Stephen J. Wilcox wrote:
> > >
> > > > paranoia on people sniffing tho!
> > >
> > > Hmmm, how about I inject an arp entry into your workstation, and redirect
> > > your traffic to where I want ?
> > >
> > > ...
> > >
> > > --Ariel
> > > >
> > > > Steve
> > > >
> > > > On Tue, 31 Jul 2001, fingers wrote:
> > > >
> > > > >
> > > > > Hi
> > > > >
> > > > > > 	Hello All ,I have charged myself with trying to find a statistic
> > > > > > 	on how many individuals responsible for IP core equipment
> > > > > > 	recommend telnet or ssh & why particularly .I will summarize .
> > > > >
> > > > > telnet is cleartext, that should be reason enough...
> > > > >
> > > > > --Rob
> > > > >
> > > > >
> > > >
> > > > --
> > > > Stephen J. Wilcox
> > > > IP Services Manager, Opal Telecom
> > > > http://www.opaltelecom.co.uk/
> > > > Tel: 0161 222 2000
> > > > Fax: 0161 222 2008
> > > >
> > >
> > > --
> > > Ariel Biener
> > > e-mail: ariel@post.tau.ac.il
> > > PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html
> > >
> > >
> > 
> > --
> > Stephen J. Wilcox
> > IP Services Manager, Opal Telecom
> > http://www.opaltelecom.co.uk/
> > Tel: 0161 222 2000
> > Fax: 0161 222 2008
> > 
> 
> --
> Ariel Biener
> e-mail: ariel@post.tau.ac.il
> PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html
> 
> 

James Smallacombe		      PlantageNet, Inc. CEO and Janitor
up@3.am							    http://3.am
=========================================================================


home help back first fref pref prev next nref lref last post