Stevan Tiefert wrote:
Hello list,

I have a thinking problem... If workstations in a private network have set
up a gateway, but the gateway has no NAT-deamon running, are the
workstations not able to be attacked? What happens if these workstations
behind this gateway are serving unprotected services (like shares on
Windows XP Home Edition which are NOT password protected), are they also
not be able to be attacked?

I understand that if these workstations wants to request answers from
outside the private network are never getting answers, but is it possible
to see and attack theses workstations from outside?

With regards
Stevan Tiefert

_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Well I just hope that you really locked down that gateway. :) You have a few probs here:


1) Your gateway is hijacked leaving your unprotected boxes at the attackers mercy. Block everything

2) Your unprotected machines are not up-to-date and by connecting to a dodgy public service something nasty is installed. Say IE flaw for example.

3)  You are running a wireless access point.  Game over! :)

There are probably more but those are some of the main problems. In general you are probably going to be ok as long as your gateway is locked down and if you run a WAP make sure it is also as secure as possible. It is still a risk though!

HTH
Chris
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to