145 reputation
15
bio website
location
age
visits member for 3 years, 8 months
seen Mar 14 at 19:09

Feb
24
accepted Is it a good idea to only allows connections to be established in the LAN->DMZ direction?
Feb
22
comment Is it a good idea to only allows connections to be established in the LAN->DMZ direction?
"Also, if the information you're using/storing is valuable in its own right and it can still be stolen by someone who has rooted the server in the DMZ then again, what you propose won't help much." At least, it will prevent the attacker from obtaining data from the whole LAN, he could only get whatever is exposed by the hijacked connection. Is there a way that if my LAN server tries to connect to a rooted DMZ server, it is actually talking to the legitimate service, and not a hacked one? That's probably going to be my next question.
Feb
22
comment Is it a good idea to only allows connections to be established in the LAN->DMZ direction?
What do you mean by "a session can be faked with relative ease from inside the DMZ"?
Feb
22
asked Is it a good idea to only allows connections to be established in the LAN->DMZ direction?
Oct
20
awarded  Notable Question
Feb
20
awarded  Popular Question
Nov
19
awarded  Student
May
23
awarded  Supporter
May
23
accepted How does Apache merge multiple matching Location sections
May
22
asked How does Apache merge multiple matching Location sections
Jan
2
awarded  Scholar
Jan
2
accepted Apache: How to tell which LDAP server my user was authenticated with
Aug
4
awarded  Teacher
Aug
4
answered Apache: How to tell which LDAP server my user was authenticated with
Aug
2
asked Apache: How to tell which LDAP server my user was authenticated with