-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hey Jared,
From the ports that you've got open it seems that this will be
either a mail or web server, so I'm guessing that this is going to
placed in a DMZ of sorts?
What VNC will you be using and what sort of AUTH will it be using,
password, RSA, Windows login credentials? I wouldn't advise running a
VNC server on a public NIC at all, what if you slap another NIC into
the box, and then set up a way to VPN into it from that side?
I have no idea on your setup though, HTH.
xyberpix
Blog: http://blogs.securiteam.com
On 23 Jan 2006, at 03:08, Jared Lyvers wrote:
First off, sorry Simon. I ment to send this to the list but sent
it to
only you instead.
Now, on to my real question.
I'm looking to use VNC on my windows machine for remote logins.
Currently
I only have the following open ports:
25/tcp open smtp
80/tcp open http
113/tcp closed auth
1352/tcp open lotusnotes
5902/tcp open vnc-2
5903/tcp open vnc-3
8080/tcp open http-proxy
Are there any security problems that I may be over looking by using
VNC on
my machine?
Regards,
JL
--
// Jared Lyvers
// -----------------------
// Director of Interactive
// Director of IT
// LPI Certified
// -----------------------
// www.lewiscommunications.com
----------------------------------------------------------------------
-----
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting
experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning,
Computer Emergency Response Teams, and Digital Investigations.
http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------
-----
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)
iD8DBQFD3MSh2VKEoIQBZwkRAuckAKDQQr7cIgWYq4s/gnpYKgX9haPMJgCgnnNN
UXPhTa+MS5j9f2G7KimSs1I=
=bnuX
-----END PGP SIGNATURE-----
---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.
http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------
