Re: Security issues and LDM

• To: Jeff Wolfe <wolfe@xxxxxxxxxxx>
• Subject: Re: Security issues and LDM
• From: "Michael W Dross" <mwdross@xxxxxxxxxxxxxxx>
• Date: Tue, 15 May 2001 15:22:17 -0400

Jeff,

There are others on this dist list that can probably answer this question
better than I, but I will let you know what I know....
LDM uses port 388. We have our firewall setup to allow traffic across the
TCP/UDP on port 388 to a few specific IP's
we send/receive data from. Our security folks have been comfortable with
this arrangement, and thats saying a lot
since our servers are on the same internal network along with our 7 nuclear
reactors :-)  They have run a number of
test to try and hack through into our system and have not had a problem
with LDM.

Also, I have played around with my Linksys router at home and by forwarding
just port 388, allows LDM to communicate
fine. So I don't believe that not having port 111 open will cause LDM
problems.

Mike Dross
Meteorologist
Duke Energy


                                                                                
                                             
                    Jeff Wolfe                                                  
                                             
                    <wolfe@xxxxxxxxxxx>           To:     
ldm-users@xxxxxxxxxxxxxxxx                                         
                    Sent by:                      cc:                           
                                             
                    owner-ldm-users@unidat        bcc:                          
                                             
                    a.ucar.edu                    Subject:     Security issues 
and LDM                                       
                                                                                
                                             
                                                                                
                                             
                    05/15/01 02:40 PM                                           
                                             
                                                                                
                                             
                                                                                
                                             





Hi folks,

I'm sure everyone is aware of the ever increasing number of worms and other

security compromises that are happening on the 'net these days. The local
security folks here want to put a blanket filter on our internet
connection for inbound port 111. The idea is that by filtering port 111,
they
make it just a bit harder for the various miscreants to find vulnerable RPC

services.

I'm trying to understand what effects that will have on our LDM servers. I
vaguely remember running ldm for a while without having the /etc/rpc file
edited properly, but that was a long time ago. I'm thinking we'll be able
to
connect to other servers, but nobody will be able to connect to us.

Longer term, has anyone considered what will happen with LDM as firewalls,
proxy servers and other security measures become more prevalent? RPC isn't
the
most firewall friendly protocol ever invented.


-JEff