[72779] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: 2511 line break

daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Mon Jul 26 16:34:21 2004

To: "Robert E. Seastrom" <rs@seastrom.com>
Cc: Randy Bush <randy@psg.com>, nanog@nanog.org
In-Reply-To: Your message of "Mon, 26 Jul 2004 15:56:04 EDT."
             <87d62iwnjf.fsf@valhalla.seastrom.com> 
From: Valdis.Kletnieks@vt.edu
Date: Mon, 26 Jul 2004 16:32:53 -0400
Errors-To: owner-nanog-outgoing@merit.edu


--==_Exmh_707024084P
Content-Type: text/plain; charset=us-ascii

On Mon, 26 Jul 2004 15:56:04 EDT, "Robert E. Seastrom" said:

> not as shocked as i am that a co-author of at least ten rfcs and
> perpetual ietf attendee doesn't recognize an rfc1918 address when he
> sees it, even when given the big hint of a hostname that does not
> appear in the global dns.
> 
> can you say "lab network"?

I don't know how you run your lab nets, but if I have something on a lab net,
it still gets secured the same way as a world-visible machine would.

1) That protects it if ever I add a gateway machine that talks to the world.

2) It keeps you in the habit of securing *everything*.

Apparently, the knee-jerk 'ewww' at using telnet, even on a lab network, wasn't
ingrained enough to configure ssh instead... Thus there's indeed a high likelyhood
that there's still telnet being used in some corner of the production net....


--==_Exmh_707024084P
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001

iD8DBQFBBWp1cC3lWbTT17ARAnqZAJ948EZ51nJ5EYpFNKDx3U/I3RlGigCfbH2U
MOYj6Woa6lxXvSPP2GuzzvM=
=TCSG
-----END PGP SIGNATURE-----

--==_Exmh_707024084P--

home help back first fref pref prev next nref lref last post