RE: Exposed serial connection

["Dawes, Rogan (ZA - Johannesburg)" <rdawes () deloitte co za>]

Check out ser2net( http://ser2net.sourceforge.net/), and stunnel
(http://www.stunnel.org/examples/client_cert.html).

Set up ser2net to allow a localhost connection to connect to the serial
port, then set stunnel up to require client authentication, and redirect to
localhost, on the port that ser2net is listening on. Just be careful of
ser2net's control port, and make sure that no-one can get to it.

A kluge, to be sure, but you could do it like that.

Rogan

> -----Original Message-----
> From: Jonas Anden [mailto:dajudge () home se]
> Sent: 16 September 2002 11:12
> To: firewall-wizards () honor icsalabs com
> Subject: [fw-wiz] Exposed serial connection
>
>
> I need to expose a sensitive serial port to a remote site through IP.
> The protocol used on the serial line is text based with some control
> bytes and totally unauthenticated. Are there any applicances 
> recommended
> that can perform the following:
>
> - Encrypting the IP connection (Preferably SSL)
> - Provide for authentication (Preferably outside the protocol sphere,
> like SSL client certificates).
> - Convert the data received on the IP end and send it out on 
> the serial
> line, and vice versa.
>
>   // J
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () honor icsalabs com
> http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards