Security Incidents mailing list archives

Deserting Firewall Operator


From: Coen Bongers <cbongers () TRAVELPLANET NL>
Date: Mon, 29 Jan 2001 17:59:56 +0100

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi people,

I hope I send this message to the right mailinglist. I have been
learning everyday since I subscribed to some of the securityfocus
mailinglists.

At one of our client's company, wher I work as a network system
engineer (not security related or responsable, thank god!!) we have a
slight problem you might say, I hope somebody can tell me wat to do;

the "free-lance" firewall operator/controller had some disagreement
with his manager about contracts and deserted his post. But not after
(we discoverd this only day's later) he build in a backdoor route to
his own cablemodem IP-adres in the router and the firewall. We
managed to disable this route immediate after we discovered it.

Still he keep's harrassing our system operators (Now also responsable
for maintaining security!!) with messages, stating that he still has
acces to the internal LAN. He even mailed following message to the
country manager of this company;

"Hi xxxx
It is no longer of my bizz,
but the Three Stooges from sysadmin put some major holes in the
configuration
it is now very easy for people from all over the world to gain access
to
the companie's LAN,financial database and the websites...
i noticed that you don't care much for security
and lost the momentum to do much about the king of the hill politics
around
you.
but there are still some people working there that should not suffer
from
the stupidity of the powergreedy and the lack of action from the
none-interested.
Have a nice day,
his name"

Wat to do, when your "guardian" turns on you?????

Thank you for your response,


Coen Bongers
Senior Network Engineer
E-mail: CoB () Kikke net

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBOnWUT9oWyqAi/3bJEQIikwCfebzcL3IcJF1ZyvPpI/zpzzs2zR4An3Gb
0/XfxjnNBbUDsayEcVUklOPh
=JLv3
-----END PGP SIGNATURE-----


Current thread: