Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 20 Aug 1999 15:20:03 -0400 (EDT)
From:      <up@3.am>
To:        Evren Yurtesen <yurtesen@ispro.net.tr>
Cc:        freebsd-isp@freebsd.org
Subject:   Re: multiple machines in the same network
Message-ID:  <Pine.GSO.3.96.990820151711.10530A-100000@richard2.pil.net>
In-Reply-To: <37BDA7A6.D999F103@ispro.net.tr>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 20 Aug 1999, Evren Yurtesen wrote:

> We are an ISP and we want to let our customers to put their own hardware
> into our network. But the thing we are concerned about is security of 
> course. How can we protect our system from customers' machines?

The best way is to just put a router between your colo customers and your
own LAN.  Second best is to employ an Ether switch.  The only way I know
of for the former method to sniff the LAN is to spoof the MAC address of a
box who's packets you want to intercept.

James Smallacombe		      PlantageNet, Inc. CEO and Janitor
up@3.am							    http://3.am
=========================================================================
ISPF 3 - The Forum for ISPs by ISPs(tm)  ||  Nov 15-17, 1999, New Orleans
3 days of clues, news, and views from the industry's best and brightest.
     Visit <http://www.ispf.com/>; for information and registration.
=========================================================================



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.GSO.3.96.990820151711.10530A-100000>