Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Bugtraq: Is it safe yet?

Is it safe yet?

From: HCTITS Security Division <security_at_humancentrictech.com>
Date: 02 Oct 2003 13:58:37 -0400

Hello Bugtraq members.
  I've been watching with keen interest the recent developments
concerning SSL vulnerabilities, most notably involving remote
compromises in SSH. When the first note came through about the remote
SSH vulnerabilities, I quickly plugged up port 22 in my company's
firewall. Unfortunately, that of course greatly reduces my work-at-home
abilities as I can no longer log in to our servers from outside..

What I would like to have suggested to me is:
--Is it safe yet? It seems that first vuln kicked off a swarm of
subsequently-discovered problems in SSL. I'm really itching to open
that port back up so I can work from home ("sleep late").
-- Would it be a better idea to open the port only to my home IP? My IP
is, for all intents and purposes, static; however, it is not guaranteed
to be.. I have this sinking feeling that as soon as I open services
dependent on my home IP, it will start changing every 3 days.

I appreciate the attention and suggestions you'll this little sprout in
the garden of network security.

Cheers,
~Brian

-- 
HCTITS Security Division <security_at_humancentrictech.com>
HumanCentric Technologies
Received on Oct 03 2003
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]