TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
Hello!!
Well, I spent yesterday morining building test Realsecure 3.2 probes using Windows NT
4.0 SP5.
The catagorical word I got from the ISS engineers in LOndon is that you do the
following:
1. Install two network cards
- Secue NT as you see fit. I use Stefan Norbergs method of securing NT (home.hp.se)
build and do not install Netbios at all.
2. Unbind EVERYTHING from the card you wish to stealth (yes, it appears to disable the
card - relax). Reboot
3. Install the RS Engine.
4. Setup comms with the RS Console.
5. The stealthed card appears in your console, select that card to install the policy
on.
We ran a Network General sniffer on the same network as the stealthed card and could
not see it in any of the network layers whil the probe was active.
Stephen Cooper
>>> "dave druitt" <[EMAIL PROTECTED]> 03/14/00 06:18am >>>
TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
DISCLAIMER: Any e-mail messages from the Bank for International Settlements are sent
in good faith, but shall not be binding nor construed as constituting any obligation
on the part of the Bank.
CONFIDENTIALITY NOTICE: This e-mail contains confidential information, which is
intended only for the use of the recipient(s) named above. If you have received this
communication in error, please notify the sender immediately via e-mail and return the
entire message. Thank you for your assistance.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Brian,
Try to ping it...
:)
dc dave
- -----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf
Of
Brian Tan Wee Beng
Sent: Monday, March 13, 2000 7:21 AM
To: [EMAIL PROTECTED]
Subject: Stealth mode verification
TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your
message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
problems!
- ------------------------------------------------------------------------
- ----
Hi
I know that it's possible to configure the network engine with one
interface in stealth mode and the other interface connected to the
console.But is there any way to verify that the interface is indeed in
stealth mode??My customer wants some concrete evidence to prove it.It
will
be even better if there's any white paper.
Cheers
______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com
-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.0.2
iQA/AwUBOM3LnMoC52hw0NieEQLb7ACfVu+l4pezdXSO6RD9fPiAawX4tQsAoLZe
KKefuAzJzSeQ3ZHDIXTbtX1o
=0Mtz
-----END PGP SIGNATURE-----
