[Dshield] Cisco VPN Question

Mark Tombaugh mtombaugh at alliedcc.com
Tue Sep 9 23:58:56 GMT 2003


On Tuesday 09 September 2003 9:32 am, Mark Warner wrote:
> My question is, can an infected machine tunneling into here bring the virus
> inside ?

Yes.

> If so how do I stop it?

For the rpc dcom vulnerability you can check to see if the client is patched 
and kick them if not with a logon script. For the rest of them use a network 
virus scanner and an IDS. 

-- 
   Mark Tombaugh <mtombaugh at alliedcc.com>
   Allied Computer Corporation <http://www.alliedcc.com>
   USiHOST, iNC. <http://www.usihost.com>

   PGP: 73D4D347 Mark Tombaugh (Allied Computer Corporation)
     Key fingerprint = CFCF B986 51A8 08D4 A0EB  0E5E CEAF 2F1B 73D4 D347




More information about the list mailing list