Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

Re: Routing protocols, Internet vs Enterprises

Subject: Re: Routing protocols, Internet vs Enterprises
Date: Wed, 26 Sep 2007 15:38:26 -0700
gjgowey@tmo.blackberry.net wrote:
With companies one of the first questions that I think some people forget to 
ask is if a routing protocol is really necessary for the network topology 
that they have.  Routing protocols are only really useful for when you have 
multiple paths out of your particular subnet.  If you only have one path out 
then using any routing protocol is needless.  

That may seem like common sense, but I used to work for one large employer 
who, because the network admins weren't too bright about routing, used ospf 
on every router they had to link all their buildings.  Even though each 
router only had a single T1 connecting it directly to the core router at the 
noc and that router had a direct 10/100 link to the upstream providers 
router.  I'd tell more, but I think some people here would think I was 
bullshitting.

Geoff


Even in a situation as you describe, using a routing protocol is not
entirely without benefit.  For instance, suppose a miscreant host is
spewing spam to the internal network, and the internet.  We could log
into the router closest to the host and put a host-level null route in
place, thus confining the hosts miscreant activity to its broadcast
domain.  If a routing protocol (OSPF, even RIP) is in place, the routing
update can be made to a central router, which will then propagate it -
which would likely make such activities easier to script, and manage.


-- 
Jim Mellander
Incident Response Manager
Computer Protection Program
Lawrence Berkeley National Laboratory
(510) 486-7204

The reason you are having computer problems is:

Did you pay the new Support Fee?

<Prev in Thread] Current Thread [Next in Thread>