-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wednesday 09 October 2002 13:03, Jeffrey wrote:
> Matthew Moen wrote:
> > Thus spake Jeffrey on the 09 day of the 10 month in the year 2002:
> > > "Ian C. Blenke" wrote:
> > > > On Mon, 2002-10-07 at 15:20, Jeffrey wrote:
> > > > > I ran into the same problem on mine. The error message on my
> > > > > box indicated that I should SUID mount, umount, smbmount, and if I
> > > > > recall correctly also smbumount. After doing that it worked fine as
> > > > > a regular user.
> > > >
> > > > Gah! The security implications are mind blowing.
> > >
> > > True, but my machine is on a home network and behind two firewalls, so
> > > that was not a real concern for me. :)
> >
> > Ahh...You must be a student of the "crunchy on the outside with a
> > sicky-sweet chewy center" school of insecurity. :-)
> >
> > --
> > Matthew Moen
>
> Not really...just overly paranoid from years of Micro$oft experience :-)
> Jeff
I think you're missing the point Jeff... Take a look at RFC1636 [1]
or this cartoon- it illustrates the point quite well. ;)
http://www.linuxwidows.com/mirror/bucket/HFC/LEAP/img28.htm
Firewalls are just one part of an overall security posture. You
should practice security in depth. Starting at the hosts (with
proper permissions, limited services, etc) throughout the internal
network, out to the perimeter.
If (when) the outer firewalls are breached, if you don't have additional
protections on the inside, the blackhats will eat you alive...
HTH!
[1] http://www.ietf.org/rfc/rfc1636.txt?number=1636
- --
Linux - the ultimate Windows Service Pack
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Brian Coyle, GCIA
iD8DBQE9pNa1ER3MuHUncBsRAmd7AJ9vrNRdjUUha7QRt/5qQxLE1LFiXwCfTMHs
polMn7XwGh9LHtMNiQzLkIs=
=iOcX
-----END PGP SIGNATURE-----
This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 15:48:52 EDT