nanog mailing list archives
Re: RFC1918 addresses to permit in for VPN?
From: "Stephen Sprunk" <ssprunk () cisco com>
Date: Mon, 1 Jan 2001 05:18:47 -0600
Thus spake <mdevney () teamsphere com>
Using RFC1918 space also gets you an IP range where the outside world has no route to it -- Sorry, but no packets are not getting
there,
ergo no way to hack.
...
At that point, just by use of simple routing, you've effectively eliminated 100% of attacks from the outside, and you only have to worry about inside. The front door is secure, now work on the back door.
Being convinced you're secure is the surest way to get yourself hacked. Perfect security is impossible. Remember, it's not paranoia when they *are* out to get you. S | | Stephen Sprunk, K5SSS, CCIE #3723 :|: :|: Network Design Consultant, GSOLE :|||: :|||: New office: RCDN2 in Richardson, TX .:|||||||:..:|||||||:. Email: ssprunk () cisco com
Current thread:
- Re: RFC1918 addresses to permit in for VPN?, (continued)
- Re: RFC1918 addresses to permit in for VPN? John Fraizer (Feb 24)
- Re: RFC1918 addresses to permit in for VPN? John Hawkinson (Feb 24)
- Re: RFC1918 addresses to permit in for VPN? John Fraizer (Feb 24)
- RE: RFC1918 addresses to permit in for VPN? Richard A. Steenbergen (Feb 24)
- RE: RFC1918 addresses to permit in for VPN? John Fraizer (Feb 24)
- RE: RFC1918 addresses to permit in for VPN? Richard A. Steenbergen (Feb 24)
- RE: RFC1918 addresses to permit in for VPN? John Fraizer (Feb 24)
- RE: RFC1918 addresses to permit in for VPN? John Fraizer (Feb 24)
- Re: RFC1918 addresses to permit in for VPN? John Fraizer (Feb 24)
- RE: RFC1918 addresses to permit in for VPN? John Fraizer (Feb 24)
- Re: RFC1918 addresses to permit in for VPN? mdevney (Feb 24)
- Re: RFC1918 addresses to permit in for VPN? Stephen Stuart (Feb 24)
- Re: RFC1918 addresses to permit in for VPN? Stephen Sprunk (Feb 24)
- RE: RFC1918 addresses to permit in for VPN? Deron J. Ringen (Feb 24)
- Re: RFC1918 addresses to permit in for VPN? Stephen Griffin (Feb 24)
- Re: RFC1918 addresses to permit in for VPN? mdevney (Feb 24)
- Re: RFC1918 addresses to permit in for VPN? Josh Richards (Feb 24)
- Re: RFC1918 addresses to permit in for VPN? Bennett Todd (Feb 24)
- Re: RFC1918 addresses to permit in for VPN? Andrew Brown (Feb 24)