nanog mailing list archives

Re: Level3 routing issues?


From: alex () yuriev com
Date: Mon, 27 Jan 2003 16:27:50 -0500 (EST)


But, we were talking about end-user connected into the inside network using
a VPN. That user needs to have pretty much unfettered access to the
business parts of your internal network. (Okay, mission critical stuff
should be seperately firewalled, but MS makes that hard enough, due to
things like Active Directory, where everything needs to talk to everything).

So what prevents the client from denying all traffic other than (a) traffic
on VPN interface (b) IP traffic on non-VPN interface with destination other
than the address that VPN client uses to build VPN?

Alex


Current thread: