It gets even worse if routing is turned ON. Then the entire Internet gets access to the other side of your VPN without having to compromise your system.
Regards, Eric ----------------------------------------- Eric B Kiser, CISSP VP of Information Technology NetOps Training Solutions ----------------------------------------- > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:leaf-user- > [EMAIL PROTECTED] On Behalf Of Scott > Sent: Monday, July 28, 2003 6:47 PM > To: Craig Caughlin; LEAF (LEAF) > Subject: Re: [leaf-user] VPN security issue? Slightly O/T... > > The only thing I can think of is if the given box's connection has been > compermised, then the attacker would also have access to the systems on > the > other side ot the VPN. > > > > ----- Original Message ----- > From: "Craig Caughlin" <[EMAIL PROTECTED]> > To: "LEAF (LEAF)" <[EMAIL PROTECTED]> > Sent: Monday, July 28, 2003 3:35 PM > Subject: [leaf-user] VPN security issue? Slightly O/T... > > > > Hi folks, > > I seem to remember a while back reading somewhere (likely either here at > > the newsgroup or perhaps a Microsoft security bulletin?) that it's a > > SIGNIFICANT security problem if you have an active VPN connection on a > > given box and can browse the internet at the same time. It was my > > understanding that either one is fine...but not both at the same time. > > Does this sound familiar to anyone? I also don't remember why it posed > > such a gaping security problem, per se. Comments??? > > > > Thank you, > > Craig > > > > > > > > > > ------------------------------------------------------- > > This SF.Net email sponsored by: Free pre-built ASP.NET sites including > > Data Reports, E-commerce, Portals, and Forums are available now. > > Download today and enter to win an XBOX or Visual Studio .NET. > > > http://aspnet.click- > url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > > ------------------------------------------------------------------------ > > leaf-user mailing list: [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/leaf-user > > SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html > > > > ------------------------------------------------------- > This SF.Net email sponsored by: Free pre-built ASP.NET sites including > Data Reports, E-commerce, Portals, and Forums are available now. > Download today and enter to win an XBOX or Visual Studio .NET. > http://aspnet.click- > url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > ------------------------------------------------------------------------ > leaf-user mailing list: [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/leaf-user > SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
