Date: Sun, 27 Feb 2005 22:21:48 +0000 From: Chris Hodgins <chodgins@cis.strath.ac.uk> To: Stevan Tiefert <stevan@rot-1.de> Cc: freebsd-questions@freebsd.org Subject: Re: security without NAT? Message-ID: <422247FC.6050606@cis.strath.ac.uk> In-Reply-To: <20050227223559.I11345@mail.rot-1.de> References: <20050227223559.I11345@mail.rot-1.de>
next in thread | previous in thread | raw e-mail | index | archive | help
Stevan Tiefert wrote: > Hello list, > > I have a thinking problem... If workstations in a private network have set > up a gateway, but the gateway has no NAT-deamon running, are the > workstations not able to be attacked? What happens if these workstations > behind this gateway are serving unprotected services (like shares on > Windows XP Home Edition which are NOT password protected), are they also > not be able to be attacked? > > I understand that if these workstations wants to request answers from > outside the private network are never getting answers, but is it possible > to see and attack theses workstations from outside? > > With regards > Stevan Tiefert > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > Well I just hope that you really locked down that gateway. :) You have a few probs here: 1) Your gateway is hijacked leaving your unprotected boxes at the attackers mercy. Block everything 2) Your unprotected machines are not up-to-date and by connecting to a dodgy public service something nasty is installed. Say IE flaw for example. 3) You are running a wireless access point. Game over! :) There are probably more but those are some of the main problems. In general you are probably going to be ok as long as your gateway is locked down and if you run a WAP make sure it is also as secure as possible. It is still a risk though! HTH Chris
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?422247FC.6050606>