270 reputation
139
bio website breakingrobots.net
location St Louis, MO
age 36
visits member for 5 years, 3 months
seen Oct 11 at 19:10

Former Network Security geek (working as a developer these days). CheckPoint & Cisco Firewall and VPN administration experience.


Some Windows Administration experience with Server 2003. Tinkering on XP, Vista, Server 2008.


OpenBSD fanatic Also likes FreeBSD, MacOSX, and Linux.


Oct
11
answered What purpose does an empty gif (1x1 pix) file serve?
Mar
20
awarded  Famous Question
Sep
11
awarded  Popular Question
Sep
26
awarded  Taxonomist
Aug
15
asked Is there a perfmon replacement?
Aug
3
awarded  Notable Question
Dec
18
awarded  Popular Question
Oct
14
comment How to resolve NIC service IDs (GUIDs)?
yes, I mean the GUID, service ID was not my terminology. ;)
Sep
30
asked How to register a domain name in Italy?
Sep
23
accepted How to resolve NIC service IDs (GUIDs)?
Sep
21
asked How to resolve NIC service IDs (GUIDs)?
Jul
17
awarded  Yearling
Jun
21
comment Does Wireshark pose a threat when installed on a server in the DMZ?
@Evan Anderson: "... I don't think any production hosts in corporate networks should be connected to the Internet except behind a dedicated firewall performing egress filtering and stateful packet inspection." I never suggested you should put production hosts in a DMZ. Indeed I think they should be in an isolated LAN with ingress/egress filtering from internal LAN & Internet. The only thing I've ever deployed to a DMZ is a hardened bastion host used for penetration testing clients' networks. Traditionally DMZ has meant the perimeter network between your border router and your firewall.
Jun
18
comment Does Wireshark pose a threat when installed on a server in the DMZ?
@Evan Anderson: by definition, a DMZ has no filtering to/from the Internet. You can have subnets that are isolated from the secure internal network and have filtered internet access (a good and useful thing), but it is not technically correct (IMHO) to call them DMZs.
Jun
17
comment Does Wireshark pose a threat when installed on a server in the DMZ?
@Evan Anderson: DMZ should not have unfiltered access to the secure internal network... all traffic in the secure internal network should be filtered coming and going according to the principle of least privilege.
Jun
17
comment Does Wireshark pose a threat when installed on a server in the DMZ?
@chris: I disagree with definition of DMZ here. Generally, the DMZ (De-Militarized Zone) is a subnet with UNFILTERED access to/from the INTERNET. Hence the term. Traffic from DMZ to internal network would be filtered. That doesn't mean to/from the Internet wouldn't be monitored, just not filtered. Hosts on a DMZ are typically hardened because they need to defend themselves. The scenario you are describing (protecting each DMZ host from every other DMZ host) is NOT what I'd expect in the typical DMZ. Sounds more like access control between VLANs to me.
Apr
5
answered Port Forwarding
Mar
8
comment Unsolicited SSH connection
My advice exactly. For even better security than knockd, require an IPSEC VPN connection to network and tunnel your SSH traffic over that. I.e. don't expose your SSH server to the world.
Mar
8
answered Have Ubuntu 9.10 desktop, just got Macbook Pro. Share over Samba, NFS, other?
Feb
12
answered Being a more attractive job candidate - Certs XOR Degree