RE: FN-FORUM Host Headering

date posted 1st October 2001 12:05

It makes no difference whatsoever if the IPs are all on the same machine
(which they must be if Host Headering/Virtual Hosting is an option) as the
attack will slow the whole machine down, thus I'd go with less IPs and use a
honey pot machine using all your spare IPs to divert any attack away from
critical systems.

Take a look at http://www.threenorth.com/LaBrea/ the source is available so
you *may* be able to compile on a win32 machine however locating the right
libaries is probably going to be a headache, however if you've got an old
386 or 486 kicking around you can stick Linux on that or use LaBrea from a
trinux boot disk (no need to even do an install) and voila - attacking your
network becomes incredibly expensive for the script kiddies!

cheers,
Alex.


> -----Original Message-----
> From: [EMAIL REMOVED]
> [EMAIL REMOVED] Behalf Of Kif
> Sent: 29 September 2001 16:58
> To: [EMAIL REMOVED]
> Subject: Re: FN-FORUM Host Headering
>
>
> "Really little need to assign separate IP address to different sites on
> IIS -also the more IP addresses you have, the more vulnerable you are to
> attack as all 32 IPs could be targetted instead of just the one."
>
> However when that one IP does get attacked it will affect ALL
> your domains..
> personally I'd rather go for the different IP's...
>
> Keith
>
>
> ===========================================================
>
> TightBriefs.com is now live!!!
>
> Clients post their tightly defined briefs, choose a price
> and freelancers are invited to apply.
>
> All client to freelancer contact is handled by us.
>
> Go To: http://www.tightbriefs.com for more details.
>
> ============================================================
>
> * Free listing for freelancers
> * Free to advertise jobs
> * Free jobs distribution service
> * Free database of 1000 freelancers
>
> Freelancers and Freelance Jobs
> http://www.freelancers.net
>
> To post to the Forum:
> [EMAIL REMOVED]
>
> To unsubscribe please email:
> [EMAIL REMOVED]
>
> To unsubscribe from the digest please email:
>
> [EMAIL REMOVED]
>
> If you have difficulties unsubscribing please email:
> [EMAIL REMOVED]
>
> To subscribe to the digest for this list or for further
> information please visit:
> http://www.freelancers.net/forum.html