RE: Remote Access (Again)

[Scott Klement <klemscot@xxxxxxxxxxxx>]

You're right... sort of...  it doesn't have to be on your LAN or on
your ISP's LAN...   It can be anywhere that the packets get sent through.
But you're right, it can't just be anywhere on the internet, only a
machine along the packet route.

Do a traceroute from the remote computer to the AS/400.  Assuming that
the ISPs firewalls allow traceroutes, each line of the output will be
one gateway that the packets travel through.

So, any computer on the same LAN with any of the listed gateways could
be sniffing your packets.


On Wed, 4 Dec 2002, Mark A. Manske wrote:

> One point of note about sniffing software -
> "unless" things have changed in the last two
> or three years (which they could have)
>
> A sniffer program MUST be run on your connection,
> which means that you have a hacker working in-house,
> or there is a hacker working at your ISP -
> not to say that it could not be happening,
> but last time I discussed with security people,
> a sniffer just hanging on the internet can only
> snif traffic there - (but be "warned" that means
> if your people working on your AS/400 do not have
> virus protection, a virus could be placed on their PC
> which would allow the sniffing to occur - this is even
> a danger if you only allow dial-up access)
>
> All communications runs the risk of being hacked -
> go as secure as you can (SSL and run 128 byte encryption -
> the lower ones(40/56) are crack able in a reasonable amount of time)
>