----- Original Message -----
From: "Dave Warren" <dave-use...@djwcomputers.com>
To: <support@pfsense.com>
Sent: Saturday, August 07, 2010 5:58 PM
Subject: [pfSense Support] Re: multi-wan, multi-lan security
In message <b8ab6ffcb532416f938e8d117b87e...@dp2000xp> Tortise
<tort...@paradise.net.nz> was claimed to have
wrote:
----- Original Message -----
From: "Dave Warren" <dave-use...@djwcomputers.com>
To: <support@pfsense.com>
Sent: Saturday, August 07, 2010 4:51 PM
Subject: [pfSense Support] Re: multi-wan, multi-lan security
In message <24b7224eff7c4e19b1a43fd4df416...@dp2000xp> Tortise
<tort...@paradise.net.nz> was claimed to have
wrote:
My ISP advised us not use common private LAN addresses for this
(common problem) reason. (I now use randomly generated addresses)
I do hope you never need to contact the legitimate owner of whatever IPs
you're using...
Personally, if my provider gave me such advice (not just a single rep,
but the provider's official policy) I'd find competent provider.
Woops - sorry for being misleading. I meant (and use) random numbers taken
from within the private address ranges. (10.x.x.x etc)
In that case, excellent advice and one I would absolutely agree with.
I'm possibly overly sensitive on this particular issue just because I'm
tired of dealing with it professionally, one of $DAYJOB's partners used
to give out advice like this and we spent untold hours cleaning up.
I hope no offense was taken, certainly none was intended on my part and
if I came across to harshly, I do apologize.
Hey no worries, I accept I could have been a little less ambiguous, dangerous
to assume anything when communicating...!
An interesting discussion. I was using random numbers to minimise the risk of arp poisoning, a dead connection is best avoided!
The comments about minimal increased security from using random nos (within private network ranges!) was not on my mind however its
food for thought.
---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com
Commercial support available - https://portal.pfsense.org
