Hi Eric, Thanks for the response. I think I'm like Alex, I don't quite understand what you mean when you say "Then the entire Internet gets access to the other side of your VPN without having to compromise your system." Could you explain that a little bit? Thank you.
Craig -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric B Kiser Sent: Monday, July 28, 2003 8:23 PM To: 'LEAF (LEAF)' Subject: RE: [leaf-user] VPN security issue? Slightly O/T... It gets even worse if routing is turned ON. Then the entire Internet gets access to the other side of your VPN without having to compromise your system. Regards, Eric ----------------------------------------- Eric B Kiser, CISSP VP of Information Technology NetOps Training Solutions ----------------------------------------- > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:leaf-user- > [EMAIL PROTECTED] On Behalf Of Scott > Sent: Monday, July 28, 2003 6:47 PM > To: Craig Caughlin; LEAF (LEAF) > Subject: Re: [leaf-user] VPN security issue? Slightly O/T... > > The only thing I can think of is if the given box's connection has been > compermised, then the attacker would also have access to the systems on > the > other side ot the VPN. > > > > ----- Original Message ----- > From: "Craig Caughlin" <[EMAIL PROTECTED]> > To: "LEAF (LEAF)" <[EMAIL PROTECTED]> > Sent: Monday, July 28, 2003 3:35 PM > Subject: [leaf-user] VPN security issue? Slightly O/T... > > > > Hi folks, > > I seem to remember a while back reading somewhere (likely either here at > > the newsgroup or perhaps a Microsoft security bulletin?) that it's a > > SIGNIFICANT security problem if you have an active VPN connection on a > > given box and can browse the internet at the same time. It was my > > understanding that either one is fine...but not both at the same time. > > Does this sound familiar to anyone? I also don't remember why it posed > > such a gaping security problem, per se. Comments??? > > > > Thank you, > > Craig > > > > > > > > > > ------------------------------------------------------- > > This SF.Net email sponsored by: Free pre-built ASP.NET sites including > > Data Reports, E-commerce, Portals, and Forums are available now. > > Download today and enter to win an XBOX or Visual Studio .NET. > > > http://aspnet.click- > url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > > ------------------------------------------------------------------------ > > leaf-user mailing list: [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/leaf-user > > SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html > > > > ------------------------------------------------------- > This SF.Net email sponsored by: Free pre-built ASP.NET sites including > Data Reports, E-commerce, Portals, and Forums are available now. > Download today and enter to win an XBOX or Visual Studio .NET. > http://aspnet.click- > url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > ------------------------------------------------------------------------ > leaf-user mailing list: [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/leaf-user > SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01 /01 ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
