Hacked hosts in a DMZ on a switch

Thread View: at.mail.firewalls

2 messages

[T] Back to Threads [V] Tree View [G] Group Articles

2 total messages Started by Michael Conlen Sat, 11 Apr 1998 00:00

#84

Author: Michael Conlen
Date: Sat, 11 Apr 1998 00:00

15 lines
848 bytes

If a host in a DMZ is hacked and the host is connected to a switch,
wouldnt it be possible to forge ARP packets which supply the MAC address
of 

FF:FF:FF:FF:FF:FF

and start the sniffer up?
					Groove on 
					Michael Conlen
					meconlen@intnet.com

Yesterday it worked
Today it is not working
Windows is like that

Re: Hacked hosts in a DMZ on a switch

#96

Author: Josh Richards
Date: Sun, 12 Apr 1998 00:00

22 lines
1238 bytes

On 11 Apr 1998, Michael Conlen wrote:

> If a host in a DMZ is hacked and the host is connected to a switch,
> wouldnt it be possible to forge ARP packets which supply the MAC address
> of 
> 
> FF:FF:FF:FF:FF:FF
> 
> and start the sniffer up?

Yes.  Just because you have a switched Ethernet in place, does not mean
you can't sniff packets destined for other hosts.  You need a router in
the middle to really seperate the two distinct data paths.

--jr

----
Josh Richards - <jrichard@livingston.com> - [Beta Engineer]
LUCENT Technologies - Remote Access Business Unit
(formerly Livingston Enterprises, Inc.)
http://www.livingston.com/

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads