Re: Windows 2000 user login

2003-03-28 Thread Chuck Swiger
Wright, Bill wrote: I have never posted to this board, so hopefully I'm following the right procedures. Mostly. :-) (Hitting return every 75 characters or so is preferred.) My issue is that a user's account keeps getting locked out due to an aggressive password policy (30 days) and he claims tha

Re: Question about dmz security

2003-02-19 Thread Chuck Swiger
[EMAIL PROTECTED] wrote: After removing access to the internal lan of course, moving it to properly within the dmz. We agree about removing the second NIC to the LAN. [ ...reordered... ] > On Sat, Feb 15, 2003 at 01:11:27PM -0500, Chuck Swiger wrote: However, better configurations may also

Re: Win CA

2003-02-17 Thread Chuck Swiger
ullmic6 wrote: Does anybody know a freeware utility that runs on Win XP and can be used to create X.509 v3 certificates and store these as PKCS#12 file? Cygwin + OpenSSL: 45-prime% uname -a CYGWIN_NT-5.1 prime 1.3.20(0.73/3/2) 2003-02-08 12:10 i686 [ ... ] 46-prime% openssl version OpenSSL 0.9

Re: Question about dmz security

2003-02-17 Thread Chuck Swiger
Jennifer Fountain wrote: I need an opinion on a current design implementation in place. We have an ftp server sitting in our dmz. This box has two nics - one is plugged into the dmz hub and one is plugged into our network. I think this is a security risk and we should just allow internal users

Re: tools used to examine a computer

2003-02-14 Thread Chuck Swiger
Hopkins, Joshua wrote: [ ... ] I found that a login script was placed into the admin account for that machine and the script erased the evidence. I was able to copy some files over the network before I took the computer into custody. What tools are out there that can really be helpful in monitori

Re: Logging NAT Translations

2003-02-10 Thread Chuck Swiger
Masembwa, Solomon wrote: Can Anyone tell me if any ISP, large medium or Small, logs their NAT translations? Yes, there exists at least one ISP (of some size), which logs NAT translations. Most do some planning on the utilization of RFC-1918 address space and configure NAT to reflect their org