RE: Easy way to automate routing table entries on clients?

  • From: Greg Mulholland <gmulholland@xxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 5 Aug 2005 10:58:22 +1000

Title: [isalist] RE: Easy way to automate routing table entries on clients?
 
Sorry Tom, mail got held up
 
Regarding that ssl tunnelling stuff. Its been something thats weighed on my mind for a while. I tend not to want to frighten my customers too much. In some (vary rare occasions) that i would consider it a potential problem on a clients network i would bring it up for consideration and discussion. Generally it comes down to risk vs cost. cost gets em everytime.
 
Regarding ssh tunnelling, i use it personally a fair bit, it is much handy for bypassing proxys and tunnelling just about anything through for testing. On occasions i have been asked to set it up for a few admins but generally shy away from something that is as exploitable as it is functional for people other than myself, especially when i can use VPN to do similar stuff and lock it down more.
 
I actually wrote an article on tunnelling rdp, vnc and the like through shh for ISA Server but yanked it at the final stage purely and simply because it worried me that as security professionals we should be aware of the downside to something like ssh, which i call the worlds handiest protocol. I had not covered the effects of allowing ssh traffic in and through networks and the traps therein. Read up on the reverse tunnel stuff and it will hit your smack in the face. This bothered me a little that i had not included that stuff in the article and had merely addressed the issue of how to connect vnc through an ssh tunnel. I never got around to finishing it.
 
Greg Mulhollad
ClearIT
Level 10, 530 Little Collins Street
Melbourne, VIC 3000
Ph: (03) 9909 7411 Fax: (03) 9909 7091


From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Wed 3/08/2005 10:32 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Easy way to automate routing table entries on clients?

http://www.isaserver.org/

I thought it was bionce?

Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls



> -----Original Message-----
> From: Greg Mulholland [mailto:gmulholland@xxxxxxxxxxxxxx]
> Sent: Tuesday, August 02, 2005 5:37 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Easy way to automate routing table
> entries on clients?
>
> http://www.isaserver.org/
>
>
> Jim what's the answer?
>
> -----Original Message-----
> From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
>
> Sent: Tuesday, 2 August 2005 8:56 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Easy way to automate routing table entries on
> clients?
>
> http://www.isaserver.org/
>
> That's beatch to you, mister!
>
> BTW, what to hip-hop and rapsters use to keep their skivvies as bright
> as new?
>
> -------------------------------------------------------
>    Jim Harrison
>    MCP(NT4, W2K), A+, Network+, PCG
>    http://isaserver.org/Jim_Harrison/
>    http://isatools.org/
>    Read the help / books / articles!
> -------------------------------------------------------
>
>
>
> -----Original Message-----
> From: Greg Mulholland [mailto:greg@xxxxxxxxxxxxxx]
>
> Sent: Monday, August 01, 2005 15:11
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Easy way to automate routing table entries on
> clients?
>
> http://www.isaserver.org/
>
> That's why you're his bitch :p
>
> g
>
>
> -----Original Message-----
> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
>
> Sent: Tuesday, August 02, 2005 7:29 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Easy way to automate routing table entries on
> clients?
>
> http://www.isaserver.org/
>
> Hey Jim,
>
> So easy, I didn't even consider it. :-)
>
> Thanks!
>
> Tom
> www.isaserver.org/shinder
> Tom and Deb Shinder's Configuring ISA Server 2004
> http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
>
>
>
>
> > -----Original Message-----
> > From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
> > Sent: Monday, August 01, 2005 4:25 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Easy way to automate routing table entries on
>
> > clients?
> >
>
> > http://www.isaserver.org/
> >
>
> > Route add -p in the logon script works well.
> >
>
> > -------------------------------------------------------
> >    Jim Harrison
> >    MCP(NT4, W2K), A+, Network+, PCG
> >    http://isaserver.org/Jim_Harrison/
> >    http://isatools.org/
> >    Read the help / books / articles!
> > -------------------------------------------------------
> >
>
> >
>
> > -----Original Message-----
> > From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
> > Sent: Monday, August 01, 2005 14:22
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] Easy way to automate routing table entries on
>
> > clients?
> >
>
> > http://www.isaserver.org/
> >
>
> > Hey guys,
> >
>
> > Anyone know an easy way to automate routing table entries
> on clients,
>
> > like with a log on script or Group Policy? Some way around
> installing
>
> > a RIP listener?
> >
>
> > Thanks!
> > Tom
> > www.isaserver.org/shinder <http://www.isaserver.org/shinder>
> > Tom and Deb Shinder's Configuring ISA Server 2004
> > http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- ISA
>
> > Firewalls
> >
>
> >
>
> >
>
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com/
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
> > jim@xxxxxxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
>
> > All mail to and from this domain is GFI-scanned.
> >
>
> >
>
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com/
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
>
> > tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit
>
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
>
> >
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com/
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> greg@xxxxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com/
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> All mail to and from this domain is GFI-scanned.
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com/
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> gmulholland@xxxxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> All mail to and from this network has been scanned for viruses
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com/
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com/
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: gmulholland@xxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx























All mail to and from this network has been scanned for viruses

Other related posts: