Re: Routing protocols, Internet vs Enterprises

[itsec.info () gmail com]

Thanks for all these comments!

Actually the background of my question is that I have been asked which
attacks are possible from a Home PC which is connected via cablemodem
to the Internet.

Originally I thought only BGP attacks are a threat but then I was
asked how about the following attacks:

a) DNS Spoofing: man in the middle
b) ICMP router discovery protocol, e.g. re-routing a route
c) ARP cache and spoofing
d) IRPAS and VIPPR attacks from phenolit
e) OSPF and HSPF attacks
etc

I thought only the a) and b) are possible but now I am confused again.

> From a cablemodem you see only autonomous systems and the respective
routers. Properly configured routers - AS to AS - support only BGP4,
don't they?

Can you please help me to understand what protocols which kind of
routers support?

Thanks very much.
Mike




On 9/27/07, Anthony <ez4me2c3d () gmail com> wrote:
> I second this guy's comment.
>
> gjgowey () tmo blackberry net wrote:
> > With companies one of the first questions that I think some people forget to ask is if a routing protocol is really 
> > necessary for the network topology that they have.  Routing protocols are only really useful for when you have 
> > multiple paths out of your particular subnet.  If you only have one path out then using any routing protocol is 
> > needless.
> >
> > That may seem like common sense, but I used to work for one large employer who, because the network admins weren't 
> > too bright about routing, used ospf on every router they had to link all their buildings.  Even though each router 
> > only had a single T1 connecting it directly to the core router at the noc and that router had a direct 10/100 link 
> > to the upstream providers router.  I'd tell more, but I think some people here would think I was bullshitting.
> >
> > Geoff
> >
> > Sent from my BlackBerry wireless handheld.
> >
> > -----Original Message-----
> > From: "Petter Bruland" <pbruland () fcglv com>
> >
> > Date: Wed, 26 Sep 2007 14:00:28
> > To:"itsec.info" <itsec.info () gmail com>,<security-basics () securityfocus com>
> > Subject: RE: Routing protocols, Internet vs Enterprises
> >
> >
> > I guess this is a start:
> > http://en.wikipedia.org/wiki/List_of_network_protocols
> >
> > In the list of protocols, some are better suited for smaller Enterprises
> > and others are better for bigger Enterprises.
> >
> > That's my 2 cents. I'm sure we'll get some better pointers from some of
> > the more 1337 SecurityFocus members :-)
> >
> > -Petter
> >
> > -----Original Message-----
> > From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
> > On Behalf Of itsec.info
> > Sent: Wednesday, September 26, 2007 1:12 PM
> > To: security-basics () securityfocus com
> > Subject: Routing protocols, Internet vs Enterprises
> >
> > Hi
> >
> > Does anybody have an overview which shows which routing protocols are
> > used in the Internet and which one within Enterprises only?
> >
> > --
> > Thanks very much for your help.
> > Mike