danger of the use of the Internet Routable IP space on network internal

Hello

We have a 16 IPv4 space which is recorded for us. For years we used these network on our internal network. We have layers of security separating the internal networks of the internet.

Recently I was asked about best practices and security using the internet routable IP on my internal network. Can someone explain to me what threat posed by really?

Thank you

Dan

Hi Dan,.

One of the fundamental principles of the internet was to provide end-to-end connectivity. NAT killed this idea but with IPv6, we have 'enough' address space public to make it workable again.

If you want security uses a firewall/ids/ips. Private addressing is not safer, anyone who tells you otherwise must have his head in the sand! :) Of course private address protects you from the outside
recognition, but once one of these servers on private address that you have exposed to the internet through port forwarding or NLBs is compromised then the false confidence in security RFC1918 is eroded, as an attacker can start hopping around your internal network... and regarding your users emails offering £££ of unclaimed funds Bank Nigerian and hovering content compromise opening flash...

Protect your network from the internet, your servers to your users and your servers to your servers!

The University where I work also has a 16, and although we now go to addressing more private because we have exhausted our share (!) and moving private allowing for aggregation of the good path and one model simple address.

see you soon,

SEB.

Tags: Cisco Security

Similar Questions

  • Windows Vista update (August 2010) left my laptop could not connect to the Internet via my home wireless network

    Yesterday, on August 13, I installed - as guest - a number of updates to Windows Vista on my laptop. It seems that most of them is security updates. There are 16 in total, of which 9 are titled "A security update for Windows Vista". (For reference, they include KB978886, KB982214 and KB2079403).

    Since the completion of this facility, I can't access the Internet using this laptop. I have a wireless router that works very well. Our other two laptops families (using Windows 7 and other Windows XP uses) are the two beautiful connection today by using the wireless router, so I know that the rest of the installation is fine.

    Immediately before installing updates, everything worked very well; Since then, the problem exists. I made no other changes of configuration, facilities or any measure that might have caused this.

    Please tell us how I can remedy this problem. So far my best idea is to uninstall all updates. I really don't want to do it, because I guess they are important!

    Thank you!

    [FYI - Norton Internet Security includes a third-party firewall (Norton Personal Firewall) as well as an anti-spyware component.]

    Looks like you have a hijackware infection on your hands there, Tim. That being said...

    Visit the Microsoft Solution Center and antivirus security for resources and tools to keep your PC safe and healthy. If you have problems with the installation of the update itself, visit the Microsoft Update Support for resources and tools to keep your PC updated with the latest updates.

    ~ Robear Dyer (PA Bear) ~ MS MVP (that is to say, mail, security, Windows & Update Services) since 2002 ~ WARNING: MS MVPs represent or work for Microsoft

  • I can access the internet in safe mode with networking; then for a short period in normal startup; but then I lose online access.

    Windows XP: internet connection

    Windows XP: I access to internet in safe mode with networking; then for a short period in normal startup; but then I lose access (IE8, Google, AOL) online. I tried several times, sometimes it seems able to stay online as long as I'm using the installation, but if I take a break, I lose access and return in safe mode.

    This question is submitted in safe mode with networking

    Hello

    Normal mode try to know what actually is the problem with the Internet connection and the components involved.

    Maybe this can help.

    For the wire connection - http://www.ezlan.net/debug.html

    For a wireless connection - http://www.ezlan.net/wireless.html

  • connect other computers to the internet through an ad hoc network of a connection__ broadband windows 7

    I have a HP netbook with a Windows 7-based broadband connection.  I created a residential group of this netbook so other computers running Windows XP can connect to it and use the connection Strip.  I have inconsistent results.  Sometimes it works and sometimes not.

    My question how do I set up a gateway to the internet from the netbook to other computers can access the internet.

    Do I need to set up a network of residential group for this place?  Is there some settings of internet connection of the netbook I need to change (for now that I disabled the firewall, so it does not interfere).

    Thank you

    I do not use a router.  My netbook has a map broadband and a wi - fi card.  Simply, I connect to internet through my broadband card.  I tried other computers to be able to access the internet through that connection, that's why I've set up homegroup (maybe I would not do?)

    Anyway, sometimes it works but is not for most.  I'm trying to keep it simple and not get a router, etc. since it is a situation that's going to happen from time to time.

    Thanks for responding!

    Paula

    As posted earlier...

    To use your netbook as access wireless router/AP watch these GUI frontends to netsh commands that will do this for you. I do not think that you have ICS enabled to do so.

    http://virtualrouter.codeplex.com/

    http://www.Connectify.me/index.html

    ICS, in my experience there is a very long time is flakey at best...

    FWIW, there are routers broadband accepting adapters broadband videophone/USB/etc function for example. According to what broadband service, you have maybe one depending on your needs.

    MS - MVP Windows Desktop Experience
    "When all else fails try what the captain suggested before you started...". »

  • After trying to connect to the internet error message knows unidentified network

    Original title: problem connecting (unidentified network) environment.

    A few times my labtop is big when it connects with the Ethernet cable say: unidentified network
    But when I connect it to an another labtop its connect to the Internet.
    I don't know what case, please help.
    Kind regards.

    Hello

    Did you change on your computer before the show?

    Follow the steps mentioned below:

    Why can't I connect to the Internet?

    http://Windows.Microsoft.com/en-us/Windows7/why-can-t-I-connect-to-the-Internet

    Windows wireless and wired network connection problems

    http://Windows.Microsoft.com/en-us/Windows/help/wired-and-wireless-network-connection-problems-in-Windows

    It could be useful!

  • I cannot connect to the internet and can not find networks as well.

    Original title: a disc XP Wibdows will repair a missing msnuser file? I can't find all the networks to connect to the internet.

    After a router problem, I had to change the name of my network. All my other PC is connected. My Dell XP Pro has for some reason not configured to search for local networks. The only error message I got was 'msnuser file is no longer available.

    I have a brand new Windows XP in case of a crash Pro CD, but I don't want to try to find out that I lost what is already stored.

    This CD will correct connectivity issues? I could back up what I need if she wants. BTW: Dell has been no help.

    Thank you.

    Hello

    I you have to check out these items-

    http://support.Microsoft.com/kb/832161

    http://support.Microsoft.com/kb/870702

    http://support.Microsoft.com/kb/308007

    Note: Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click on the number below to view the article in the Microsoft Knowledge Base:

    http://support.microsoft.com/kb/322756 - how to backup registry.

    Let us know if it works for you.

  • WRT160N is unable to access the internet but who still have network connectivity

    I have a PC attached by a cable and a PC and a laptop connected wirelessly to my router. Someone knocked taking sheets, so I reconnected it and now I can't access the internet even if I still have access to the network and I can get readers shared on all machines. I can ipconfig all machines and get Ip etc. I ping too the other machines on the network, but Firefox and IE will not go to the internet

    I plugged the cable directly from the modem to 2 machines and get internet access. I rebooted router, modem, and workstations many times. I even put in the disk of router and crossed all configurations, once more and it went well but still the same result.

    I have no wireless phones, but they have a wireless printer that I bought a few weeks but dounbt that this would hinder.

    The router is only a few months old, ideas?

    Your router could have lost configuration settings and may need to be reconfigured.

    Since you're online with the modem then you reconfigure router following this.

    For connection cable and broadband connection.

  • There is the Red Cross in the icon network and cannot connect to the internet, to detect any wireless network.

    * Original title: Internet connection problem

    It has red cross standing in the network icon and I can't connect to internet via USB modem or WiFi. It is also not detect any wireless network.

    Aalishan salvation,

    -Have there been recent changes made on the computer before the show?

    This problem can result from network card or driver settings.

    I will only refer to the suggestions provided by Gokul T on May 14, 2010 and check if it helps.

    http://answers.Microsoft.com/en-us/Windows/Forum/Windows_7-networking/Windows-7-is-unable-to-detect-any-wireless/9a7386ba-7775-4039-940b-20fa537c6084

    Warning: Using third-party software, including hardware drivers can cause serious problems that may prevent your computer from starting properly. Microsoft cannot guarantee that problems resulting from the use of third-party software can be solved. Software using third party is at your own risk.

    For more information, see the links.

    Why can't I find a wireless network?

    Wireless and wired network problems

    Keep us informed on the status of the issue.

  • I can't connect to the internet? I called Roadrunner and everything is good on the end there, it is something with the computer?

    Under network connection, it says connected

    Work offline is not checked

    Dell Dimension 2300

    Hello

    1 how long have you been faced with this problem?
    2 do you have you can all changes on the computer before this problem?
    3. what type of internet connection do you use?
    4. do you get an error message trying to browse the internet?
    5. have you checked if you are able to access the internet in safe mode with networking?

    In response to the questions above could help us help you better.

    See also the article below, that might help.
    How to troubleshoot possible causes of Internet connection problems in Windows XP
    http://support.Microsoft.com/kb/314095

  • I can't connect to the internet after the elimination of the virus and new restore point.

    I use IE8. I can only connect to the internet in safe mode with network.  What can I do to connect to the internet in the normal windows?

    Hello

    When parasites get installed on your computer, they might create hooks in the system computer activities related to the program "Junk" files  When you get rid of the 'Junk' hooks could remain in the system, in the absence of target files (they cleaned) problems are created in the network and Internet related activities.

    If after uninstalling the "Junk", the Internet connection does not work as it should, you will need to restart the operating system parts which get trashed by the process.

    WinSock and TCP/IP update.

    Type Cmd in the search text box.

    Press Ctrl-Shift-Enter keyboard shortcut to run a command as administrator prompt.  Allow the elevation.

    Type netsh winsock reset at the command prompt and press the Enter key.

    The same processes to refresh the TCP/IP replaces the command typed with.

    netsh int ip reset press enter

    ipconfig/flushdns, press enter

    Restart your computer.

  • connection issues - unable to connect to the Internet after the elimination of viruses

    computer has had the virus in the start menu... ran the antivirus... took care of them... now can't connect to the internet. another pc which is networked with this one game a router is fine... any ideas... thnks

    Hi Neldawalsh,

    What is the error message?

    Have you been able to connect to the internet before you run the scan?

    For now you can follow the procedure as described below:

    How to troubleshoot possible causes of Internet connection problems in Windows XP
    http://support.Microsoft.com/kb/314095

    Troubleshooting network connection problems

    http://www.Microsoft.com/windowsxp/using/networking/maintain/troubleshoot.mspx

     

    Reference link:

     

    Internet Explorer is slow? 5 things to try

    http://Windows.Microsoft.com/en-us/Windows/help/Internet-Explorer/slow-five-tips-to-boost-performance

    Tips for solving problems when Internet Explorer hangs or stops working

    http://Windows.Microsoft.com/en-us/Windows-Vista/tips-for-solving-problems-with-Internet-Explorer

    Kind regards

    Kiki

  • Cannot access a Web site, but can ping IP addresses on the internet

    -With the help of Vista SP2 64-bit on laptop faulty.

    -Number of computers on the same network have access to the internet.

    -Tried several network interfaces on this laptop, but no luck for access to the network, wired or wireless

    -From this notebook, I can ping addresses Internet IP so the problem seems to be the side DNS.

    -Flushing DNS cache and reset the network interface.

    -Rebooted several times.

    What did I miss?

    Thanks in advance

    Hey easternguy,.

    Check if you can test the Web site by name.

    To do this:

    a. Click Start and type cmd.

    b. press ENTER.

    c. type the following command:

    ping hostname

    Ping uses name resolution to resolve a computer by IP address name. Therefore, if you successfully ping the IP address but you cannot ping a computer name, there is a problem with host name resolution, and no network connectivity.

    Case 1: If you can not ping the Web site using its address, follow these steps.

    In this case, try changing your host file.

    In the C:\Windows\System32\Drivers\etc Hosts files may be damaged or corrupted.

    Review the contents of your HOSTS file and compare it to the screenshot below. There is no need to worry about any line that starts with a # is ignored by Windows. In addition, the line "127.0.0.1 localhost" can be ignored without risk, because it is a standard input.

    Everything that appears in your HOSTS file without a # earlier this year, aside from the "127.0.0.1 localhost" line, should be regarded with suspicion when we try to diagnose the cause of the problem. The fastest way to test the involvement of HOSTS file is to just rename the host file. By changing the name of the HOSTS file, prevent us Internet Explorer to use it and so all problems caused by the file.

    Case 2:

    If you can ping external websites by IP address and name, but can't browse the web, probably your browser is misconfigured.

    Check that you do not have an incorrect Proxy Server affected necessary or not.

    For Internet Explorer, follow these steps.

    a. open Internet Explorer.

    b. go to Tools / Internet Options.

    c. click on the Connections tab.

    d. click the LAN Settings button.

    "e. uncheck both" "automatically detect settings" and "use a proxy server for your LAN '.

    This should be it.

    Kind regards

    Shinmila H - Microsoft Support

    Visit our Microsoft answers feedback Forum and let us know what you think.

  • How to activate the Internet connection on the network and sharing Center.

    I clicked on disable when I opened it. I tried to find a solution to this, but I can't find anywhere on the web. Please, help me difficulty find my internet connection. I'd really appreciate it. It's windows 7.

    OT: I accidentally disabled the internet connection by going to network and sharing Center

    Thank you.

    Hello
    I suggest you to run the network troubleshooter utility.

    Using the troubleshooter from network in Windows 7
    http://Windows.Microsoft.com/en-us/Windows7/using-the-network-troubleshooter-in-Windows-7

    See also the link: wireless and wired network problems
    http://Windows.Microsoft.com/en-us/Windows/network-connection-problem-help#network-problems=Windows-7&V1H=win81tab1&V2H=win7tab1&V3H=winvistatab1&v4h=winxptab1

    Post us the results after trying the steps above.

  • computer does not connect to the internet after reinstalling XP SP2 wit

    After that the computer we reinstalled windows XP with SP2.  The operating system loaded fine, but don't can't get the computer to connect to the internet.  Went through all the steps suggested even check the Service Manager to ensure that the appropriate services are started.  Any help would be appreciated.

    Hi DamonBrigham,
     
    -What exactly happens when you connect to the Internet? You get an error message or error code? If Yes, indicate the same.
     
    -Do you have a cable or a wireless connection?
     
    If this is a wired connection, try starting mode safe mode with network and check if you can connect to the Internet successfully.
     

    Networking Mode safe mode starts Windows in mode safe mode and includes the network drivers and services needed to access the Internet or other computers on your network.

    See this link for instructions on the boot safe mode with networking:

    A description of the options to start in Windows XP Mode

  • Unable to connect to the internet, NVIDIA nForce Networking Controller issues

    The NIC 'NVIDIA nForce Networking Controller' experiences driver or hardware problems... the message that I get when trying to connect to the internet.

    In under 'Network adapters' Device Manager double-click your network adapter, in the, click the tab drivers, click on the button 'Disable', properties when disabled, click 'enable '.

    You can also try the "Uninstall" button to uninstall. Then on the Action menu click on "Scan for hardware cahnges ' of the reinstall.

Maybe you are looking for