<div dir="ltr">Yeah but they probably had another NIC in it you didn't know about on a private WAN.</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, May 21, 2014 at 10:26 AM, Mark Currie <span dir="ltr"><<a href="mailto:MCurrie@laserfast.com.au" target="_blank">MCurrie@laserfast.com.au</a>></span> wrote:<br>

<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">There was a time the only US Government certified way to properly secure MS Windows was to disconnect it from the network and disable the LAN ports. One could argue that is probably still the case :-)<br>


<span class="HOEnZb"><font color="#888888"><br>
Mark Currie<br>
</font></span><div class="im HOEnZb"><br>
-----Original Message-----<br>
From: AusNOG [mailto:<a href="mailto:ausnog-bounces@lists.ausnog.net">ausnog-bounces@lists.ausnog.net</a>] On Behalf Of David Beveridge<br>
Sent: Wednesday, 21 May 2014 9:33 AM<br>
To: <a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a><br>
Subject: Re: [AusNOG] network security Question<br>
<br>
</div><div class="HOEnZb"><div class="h5">On Wed, May 21, 2014 at 9:21 AM, Oliver Eyre <<a href="mailto:oliver.eyre@bigair.net.au">oliver.eyre@bigair.net.au</a>> wrote:<br>
> How else are you supposed to stop the hackers if you can't block ICMP???<br>
><br>
Hmm,<br>
Better block DNS requests also...<br>
<br>
<a href="http://analogbit.com/tcp-over-dns_howto" target="_blank">http://analogbit.com/tcp-over-dns_howto</a><br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
</div></div></blockquote></div><br></div>