Security Problem

Franco Nogarin ( webmaster@auroranet.nt.ca )
Thu, 24 Apr 1997 09:42:07 -0600

------ =_NextPart_000_01BC5093.C71B4900
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi, I have a big problem.

1. It is well known in our area that we are "Easy to steal Internet =
From". I was rather shocked when I heard this, after several hours of =
pouring through logs and spot checks on modems, I have discovered only =
one thing which may or may not be the cause.

We have 10 modems on our portmaster2e, 8 for public dialup on a hunt and =
peck with a base number of 872-5508, we also have one staff modem on a =
seperate line of 872-4437, and last but not least my administration =
modem on 872-5508 an unlisted private line.

Some callers are starting to use this line, how this is I dont know, but =
I need a way to limit the admin modem on the portmaster to only accept =
calls from two or three SAs. This will solve my modem problem.

As to the security issue, is anyone aware of a way to hack into =
radius/emerald, or of a bad configuration that will allow free access???

Thanks for your help.
Franco Nogarin
Cascade-AuroraNet-WebSpinners
webmaster@auroranet.nt.ca

------ =_NextPart_000_01BC5093.C71B4900
Content-Type: application/ms-tnef
Content-Transfer-Encoding: base64
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==

------ =_NextPart_000_01BC5093.C71B4900--