firewall + masq - otazocky

[Brano Zarnovican]

> > A co znamena toto:
> >        If your private network contains any vital information,
> >        think carefully before using IP Masquerade.  This may be a
> >        GATEWAY for you to get to the Internet, and vice versa for
> >        someone on the other side of the world to get into your net­
> >        work.
> > Ako zle musi byt masquerading nastaveny, aby to ohrozilo vnutornu siet?
> 
> To neni nastaveni maskaradovadla, ale treba zabezpeceni ruznych
> internet exploderu (nechcizadnou firmu obvinovat); co vy vite, po
> jakem javaScriptu ten vas stroj posle obsah firemni databaze ven
> do sveta?
Ale tomu sa asi neda zabranit ani dobre nastavenou maskaradou, ani
firewall-filter+proxy, ktory sa pozera len na porty.

> > Napr. DNS. Len nahodou som sa dozvedel, ze
> > "niekedy" ide namiesto UDP cez TCP :-O.
> 
> TO kdyz je odpoved tak velka, ze se do UDP paketu nevejde.
To uz teraz viem, ale DNS bol len priklad. Co ma este cakaju
za prekvapenia. SSH, IRC, ICQ, atd ..

						BranoZ

PS: Dik za odpoved.