[ale] IPSec question

Stephan Uphoff ups at tree.com
Tue Jul 20 12:05:02 EDT 2004


Geoffrey wrote:
> Because they are supporting the service.  Again, you're at their mercy. 
>   Most companies don't permit just anyone vpn type connectivity.  Since 
> you don't 'manage' the firewall in question, you'll have to work with 
> each company to get ipsec connectivity.

But you can tunnel over HTTP/DNS/SMTP/ICMP....... any protocol };-)

You can easily leak informations through firewalls and even gateways
if you control machines on both sides.

	Stephan 



More information about the Ale mailing list