full-disclosure - Rogue Network Link Detection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue Dec  6 11:58:08 2005
From: randallm at fidmail.com (Randall M)
Subject: Rogue Network Link Detection

::::-----Original Message-----
::::From: full-disclosure-bounces@...ts.grok.org.uk 
::::[mailto:full-disclosure-bounces@...ts.grok.org.uk] On 
::::Behalf Of H D Moore
::::Sent: Monday, December 05, 2005 11:42 PM
::::To: full-disclosure@...ts.grok.org.uk
::::Subject: [Full-disclosure] Rogue Network Link Detection
::::
::::"Unauthorized network links are one of the biggest problems 
::::facing large enterprise networks. Users intent on bypassing 
::::corporate proxies will often use cable modems, wireless 
::::networks, or even full-fledged T1s to access the internet. 
::::These network links can have a drastic affect on 
::::organizational security; any perimeter access controls are 
::::completely bypassed, making it nearly impossible for the 
::::administrators to effectively concentrate their monitoring 
::::and intrusion prevention efforts. This document attempts to 
::::describe different approaches and techniques that can be 
::::used to detect these rogue network links."
::::
::::http://metasploit.com/research/misc/rogue_network/
::::
::::-HD
::::_______________________________________________
::::Full-Disclosure - We believe in it.
::::Charter: http://lists.grok.org.uk/full-disclosure-charter.html
::::Hosted and sponsored by Secunia - http://secunia.com/
::::

We FINALY fix that problem. We implemented VMPS/Vlans using MAC address. Any
rogue is placed in deny.