Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

Re: Routing protocols, Internet vs Enterprises

Subject: Re: Routing protocols, Internet vs Enterprises
Date: Thu, 27 Sep 2007 15:32:55 +0200
Thanks for all these comments!

Actually the background of my question is that I have been asked which
attacks are possible from a Home PC which is connected via cablemodem
to the Internet.

Originally I thought only BGP attacks are a threat but then I was
asked how about the following attacks:

a) DNS Spoofing: man in the middle
b) ICMP router discovery protocol, e.g. re-routing a route
c) ARP cache and spoofing
d) IRPAS and VIPPR attacks from phenolit
e) OSPF and HSPF attacks
etc

I thought only the a) and b) are possible but now I am confused again.

From a cablemodem you see only autonomous systems and the respective
routers. Properly configured routers - AS to AS - support only BGP4,
don't they?

Can you please help me to understand what protocols which kind of
routers support?

Thanks very much.
Mike




On 9/27/07, Anthony <ez4me2c3d@gmail.com> wrote:
I second this guy's comment.

gjgowey@tmo.blackberry.net wrote:
With companies one of the first questions that I think some people forget 
to ask is if a routing protocol is really necessary for the network 
topology that they have.  Routing protocols are only really useful for when 
you have multiple paths out of your particular subnet.  If you only have 
one path out then using any routing protocol is needless.

That may seem like common sense, but I used to work for one large employer 
who, because the network admins weren't too bright about routing, used ospf 
on every router they had to link all their buildings.  Even though each 
router only had a single T1 connecting it directly to the core router at 
the noc and that router had a direct 10/100 link to the upstream providers 
router.  I'd tell more, but I think some people here would think I was 
bullshitting.

Geoff

Sent from my BlackBerry wireless handheld.

-----Original Message-----
From: "Petter Bruland" <pbruland@fcglv.com>

Date: Wed, 26 Sep 2007 14:00:28
To:"itsec.info" <itsec.info@gmail.com>,<security-basics@securityfocus.com>
Subject: RE: Routing protocols, Internet vs Enterprises


I guess this is a start:
http://en.wikipedia.org/wiki/List_of_network_protocols

In the list of protocols, some are better suited for smaller Enterprises
and others are better for bigger Enterprises.

That's my 2 cents. I'm sure we'll get some better pointers from some of
the more 1337 SecurityFocus members :-)

-Petter

-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com]
On Behalf Of itsec.info
Sent: Wednesday, September 26, 2007 1:12 PM
To: security-basics@securityfocus.com
Subject: Routing protocols, Internet vs Enterprises

Hi

Does anybody have an overview which shows which routing protocols are
used in the Internet and which one within Enterprises only?

--
Thanks very much for your help.
Mike




<Prev in Thread] Current Thread [Next in Thread>