[c-nsp] Security Advisories for DHCP

2012-09-26 Thread Dirk Woellhaf
Hi, Is there a general problem with Cisco and DHCP? Did get a lot of SA's regarding DHCP and nearly any OS! ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] Security Advisories for DHCP

2012-09-26 Thread cnsp
Hi, Is there a general problem with Cisco and DHCP? Did get a lot of SA's regarding DHCP and nearly any OS! Just starting at IOS 12.5 aehm 15.0 , They claim that the 12.0 12.2 12.3 12.4 based releases are not affected. Juergen. ___ cisco-nsp

[c-nsp] Security Survey: Please Participate

2012-09-17 Thread Sockrider, Gary
[http://www.swiftpage1.com/CampResource/2T0ZVZBHI4PY5TEG/header.jpg] Arbor Networks would like to invite you to participate in our annual Infrastructure Security Survey - a survey of service providers, enterprises, government agencies, universities and

[c-nsp] Security Management tool

2009-04-30 Thread Mohammad Khalil
hey all, I am looking for a free software for security management any suggestions ? _ Drag n’ drop—Get easy photo sharing with Windows Live™ Photos. http://www.microsoft.com/windows/windowslive/products/photos.aspx

Re: [c-nsp] Security Management tool

2009-04-30 Thread a. rahman isnaini r.sutan
Mohammad, You mean open source ? PFsense, IPCop, Untangle, ect Unfortunately this list is not on what you need. rgs a. r. isnaini rangkayo sutan Mohammad Khalil wrote: hey all, I am looking for a free software for security management any suggestions ?

Re: [c-nsp] Security question regarding VTP in a L2 shared environment

2009-02-23 Thread Geoffrey Pendery
Hypothetically, if there is no L2 or L3 security in place, would it be as simple as creating a sw acc vlan 230, and allowing 230 on the trunk port on my switch to start scoping about at the other end? Well, the L2 security in question is that on the other end of the trunk, it *should* be

Re: [c-nsp] Security question regarding VTP in a L2 shared environment

2009-02-23 Thread Steve Bertrand
Geoffrey Pendery wrote: Hypothetically, if there is no L2 or L3 security in place, would it be as simple as creating a sw acc vlan 230, and allowing 230 on the trunk port on my switch to start scoping about at the other end? Well, the L2 security in question is that on the other end of the

[c-nsp] Security question regarding VTP in a L2 shared environment

2009-02-20 Thread Steve Bertrand
I have a shared L2 environment with a local company, in which we have numerous VLANs over fibre. I'm in the process of moving to transparent on all of my switches, and during the work, I'm checking things out. Doing a sh vlan produces output that includes VLANs that I shouldn't see: 230

Re: [c-nsp] security

2008-12-03 Thread Adam Greene
-nsp] security Actually, ARP does *not* use any IP broadcast address at all, neither limited or subnet broadcast. Because it isn't using IP... ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp

Re: [c-nsp] security

2008-12-03 Thread Tim Durack
On Wed, Dec 3, 2008 at 9:14 AM, Adam Greene [EMAIL PROTECTED] wrote: Thanks for helping me brush up on basic networking! :) Under what circumstances would directed broadcast actually be a useful feature? Wake-on-LAN. That's the only reason we permit directed-broadcasts. Tim:

Re: [c-nsp] security

2008-12-03 Thread Chris Gauthier
1. Thanks for the awesome explanations. I've been dealing with these terms for a while, but had not really grasped them too hard until now. (To be honest, I had not looked them up in a while either.) 2. When would a directed broadcast be useful? Not only for WOL, but for some disk

Re: [c-nsp] security

2008-12-03 Thread Vinny Abello
@puck.nether.net Subject: Re: [c-nsp] security 1. Thanks for the awesome explanations. I've been dealing with these terms for a while, but had not really grasped them too hard until now. (To be honest, I had not looked them up in a while either.) 2. When would a directed broadcast

Re: [c-nsp] security

2008-12-02 Thread Adam Greene
How does one get around the side-effect of not allowing broadcasts; i.e. wouldn't this break ARP functionality? - Original Message - From: Jay Hennigan [EMAIL PROTECTED] To: cisco-nsp@puck.nether.net Sent: Monday, December 01, 2008 4:29 PM Subject: Re: [c-nsp] security Matlock

Re: [c-nsp] security

2008-12-02 Thread Gert Doering
Hi, On Tue, Dec 02, 2008 at 09:02:56AM -0500, Adam Greene wrote: How does one get around the side-effect of not allowing broadcasts; i.e. wouldn't this break ARP functionality? This has no effect on things that happen *inside* the network - it will just stop converting IP broadcast - link

Re: [c-nsp] security

2008-12-02 Thread Michael Simpson
On 12/2/08, Adam Greene [EMAIL PROTECTED] wrote: How does one get around the side-effect of not allowing broadcasts; i.e. wouldn't this break ARP functionality? Not within the subnet using ethernet arp is only on the local segment and won't traverse the router no ip directed broadcast stops

Re: [c-nsp] security

2008-12-02 Thread Paul Cosgrove
Michael Simpson wrote: On 12/2/08, Adam Greene [EMAIL PROTECTED] wrote: How does one get around the side-effect of not allowing broadcasts; i.e. wouldn't this break ARP functionality? Not within the subnet using ethernet arp is only on the local segment and won't traverse the router

Re: [c-nsp] security

2008-12-02 Thread Gert Doering
Hi, On Tue, Dec 02, 2008 at 03:29:58PM +, Paul Cosgrove wrote: Arp uses a destination IP of 255.255.255.255, which is the 'limited broadcasts address'. Packets with this destination are never routed between subnets. Actually, ARP does *not* use any IP broadcast address at all, neither

Re: [c-nsp] security

2008-12-02 Thread Paul Cosgrove
Gert Doering wrote: Hi, On Tue, Dec 02, 2008 at 03:29:58PM +, Paul Cosgrove wrote: Arp uses a destination IP of 255.255.255.255, which is the 'limited broadcasts address'. Packets with this destination are never routed between subnets. Actually, ARP does *not* use any IP

Re: [c-nsp] security

2008-12-02 Thread Mark Boolootian
Actually, ARP does *not* use any IP broadcast address at all, neither limited or subnet broadcast. Because it isn't using IP... ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

[c-nsp] security

2008-12-01 Thread chloe K
Hi I read doc about no ip direct broadcast but I still don't understand. Can you give me example? Thank you - Yahoo! Canada Toolbar : Search from anywhere on the web and bookmark your

Re: [c-nsp] security

2008-12-01 Thread Matlock, Kenneth L
] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chloe K Sent: Monday, December 01, 2008 1:47 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] security Hi I read doc about no ip direct broadcast but I still don't understand. Can you

Re: [c-nsp] security

2008-12-01 Thread Jay Hennigan
Matlock, Kenneth L wrote: An IP diected broadcast is an IP packet destined for the network or broadcast address. So for example let's say you have a subnet of 192.168.1.0/24 192.168.1.0 is the network address. 192.168.1.255 is the broadcast address. An IP packet destined for 192.168.1.255