> -----Original Message----- > From: Jay Ashworth [mailto:j...@baylink.com] > Sent: 16 November 2011 13:38 > To: NANOG > Subject: Re: Have they stopped teaching Defense in Depth? > > ----- Original Message ----- > > From: "Jimmy Hess" <mysi...@gmail.com> > > > Or, the attack is against a legitimate user's outbound connection, > for example: > > a user behind the firewall connects to a web site, a vulnerability > > in their browser is exploited > > to install a trojan -- the trojan tunnels to the attacker over an > > outgoing port that is allowed on the firewall. > > Oh, certainly; I have lots of web browsers running on my servers. > > All The World Is Not A Workstation, guys.
I think the point is that you access your servers from your work station and so if the workstation you use to access the network is compromised then your whole network is potentially compromised. -- Leigh ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________
