Re: Secure Home Networking?

Sandy,

My 2-minor-cents.. (fundamentals)

I'd simply ensure that you have no extra services listening/availale to the outside world. IOW, if you have one of those linksys or dlink SOHO routers, make sure web administration is not enabled on the 'outside' interface, netbios is not forwarding inside your lan, etc. Keep the firmware on the router updated. If you have a unix fw you could deny icmp echo req's, etc. You should then run nmap against your IP from an untrusted host (ie, everyone else) on the 'net. As long as you don't have common ports like 80, 139, etc just sitting there waiting to be probed, you should be alright. I run sshd on an obscure port that *isn't* listed in {/etc/,/usr/share/nmap/nmap-}services, just so i can access my machine from anywhere on the internet. Keep ssh updated, obviously. This thwarts most of the 'would-be's and s|<1pT kidz. Hope you didn't already know all this,

Brett

On Mon, May 26, 2003 at 02:47:12PM -0600, Sandy Turner wrote:
> Any suggestions on tests to run to judge the security of a home

-- 
Brett Ryan Campbell
Systems Administrator, CAD Research Center
Cal Poly State University, San Luis Obispo, CA 93407
http://www.cadrc.calpoly.edu/frameset_content/content_about_us.html

---------------------------------------------------------------------------
----------------------------------------------------------------------------