Re: encapsulated protocols?

[dharris () kcp com]

Hire people not smart enough to install plugins.
Control the configuration of all systems and don't allow this plugin.
Use the perfect firewall - a $5.95 pair of wire clippers.
Go back to the archives and read about intrusion detectors.
Block access to the sites which cooperate with the plugin.
Parse the incoming stream and block invocation of the plugin.

Not clever, but ideas still.



______________________________ Reply Separator _________________________________
Subject: encapsulated protocols?
Author:  "Mark Horn [ Net Ops ]" <mhorn () funb com> at INTERNET-MAIL
Date:    2/3/98 11:43 AM


Hello,

Lately, I've noticed an increasing number of network protocols that are 
encapsulating themselves over existing protocols.  And then using some of 
our proxies to navigate anywhere on the Internet.
<snip>
The end result is that any protocol can traverse the firewall.  You simply 
need to get the "plugin" to the inside, and then you're home free.  Does 
anyone have any clever ideas as to how to prevent this encapsulation 
trick?

-- 
Mark Horn <mhorn () funb com>

PGP Public Key available at: http://www.es.net/hypertext/pgp.html
PGP KeyID/fingerprt: 00CBA571/32 4E 4E 48 EA C6 74 2E 25 8A 76 E6 04 A1 7F C1