Re: [PCTECH] VPN questions

["Adam Lang" <aalang@xxxxxxxxxxxxxxxxxxxx>]

Again, that would be bad security policies.  There is NO reason why the VPN
router should allow traffic to pass between VPN clients.

As a system admin, you know EXCTLY what resources a remote user is going to
access.  Lockdown all the ports except the ones they need for the apps.
Then, do IP specific routing.  Meaning, only route packets designated for
the necessary servers. Do not do full subnet routing.  Many system admins
have no clue of how to really harden their network.
----- Original Message ----- 
From: "John Ross" <jross-ml@xxxxxxxxxxxxxxx>
To: "PC Technical Discussion for iSeries Users" <pctech@xxxxxxxxxxxx>
Sent: Wednesday, August 04, 2004 5:42 PM
Subject: Re: [PCTECH] VPN questions


> "Exceptions are a fact of life. But it isn't surprising that
> remote-access VPN clients are renowned conduits for hostile programs to
> enter the internal environment. "
>
>
http://www.computerworld.com/networkingtopics/networking/vpn/story/0,10801,91886,00.html
>
>
> A side note: If I am on the VPN and you are on the VPN and I have a worm
> it could find your PC, another reason for firewalls and virus scanners
> on the PC, or at least keep your software patched. The VPN could allow
> another door to your PC, around your Router firewall. I am not sure how
> a firewall even on a PC will hand this since the data will be encrypted.
>   I would be interested to know.
>
> John Ross
> www.ERP400.com
> www.Netshare400.com
>
>
> --
> This is the PC Technical Discussion for iSeries Users (PcTech) mailing
list
> To post a message email: PcTech@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/pctech
> or email: PcTech-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/pctech.