4 ms·
My internal exposure was small because there weren't many people in the office (usually 2-3 at most). In a larger environment I would probably filter to specif
by einhverfr 13y ago
My internal exposure was small because there weren't many people in the office (usually 2-3 at most). In a larger environment I would probably filter to specific admin access points.
- bigiain 13y agoI think in this "post-Snowden" era, you now need to consider not just the people on the internal network, but whether any of the gear on that network might be betraying you to the NSA. I'm sitting here in my loungeroom looking at my printer, the PlayStation, the Media Server, a bunch of laptops, a few phones, a couple of iPads, a Mac Mini, the linux box, a RaspberryPi, the cheapo chinese adsl/wifi box, and the old NetGear ethernet switch – and wondering if any of them are taking advantage of the privileged access my home IP address has on a bunch of other internet connected networks?
- einhverfr 13y agoOh sure. Actually that was part of my monitoring too (periodic reporting of outgoing natted connection).