[prev in list] [next in list] [prev in thread] [next in thread] 

List:       firewalls-gc
Subject:    Re: [Fwd: Internal modems ?]
From:       Adam Shostack <adam () homeport ! org>
Date:       1997-01-30 14:08:26
[Download RAW message or body]

Patrick Larkin Jr wrote:

| >    Maybe this subject has been dealt with to the point of sickness, but...
| >    One of my customers is looking for a _systematic_ way (well, as near as
| > possible, as usual) to detect if any internal user, on his network, may have
| > some modem attached to his computer (W95, OS/2 or Unix). I just told him that
| > this seemed dubious at most, but customers are customers.
| >    So, what is your opinion ?

	Not yet mentioned was that dialup IP connections often send
out telltale messages; I've seen ICMP redirects for IP space that
should not have been reachable when someone dialed to their ISP.

	Its not reliably there, but is something to look for.

Adam



-- 
Pet peeve of the day: Security companies whose protocols dare not
speak their name. Guilty company of the day is Security Dynamics.

[prev in list] [next in list] [prev in thread] [next in thread]