|
Posted by Leythos on April 8, 2006, 6:48 pm
If you were Registered and logged in, you could reply and use other advanced thread options
revolution_158@hotmail.com says...
> Hi there.
>
> I have been taught that the average consumer-grade IP NAT-capable wired
> router is (for residential end users, SOHO users, or really anyone who
> does NOT need to explicitly open ports in their Internet gateway device
> or run a DMZ) an execellent protection against both network worms and
> malicious crackers or script kiddies. Specifically, I have been told
> that by the nature of the form of IP NAT used by consumer/home user
> routers, all unsolicited inbound network traffic is simply discarded,
> thereby protecting all users on the network from UNSOLICITED attacks.
> Obviously, that would still leave you vulnerable to any malicious
> traffic that you personally allow to enter your PC, such as foolishly
> downloading malware-infected programs.
>
> So my questions are as follows: is it true that all unsolicited
> network traffic that attempts to pass through a consumer/home user
> grade wired NAT router (assuming the necessary configurations are
> properly made, of course) is dropped? If so, is it possible for some
> manner of attack to fool the NAT router (without the user's knowledge
> or intervention) into thinking that some malicious unsolicited traffic
> was solicited? And if so, are there any known exploits that exist in
> the wild? Don't forget that I'm asking about wired-only routers here,
> no WIFI.
>
> Thanks in advance for your time and help.
It's always possible to have a exploit that allows inbound without
solicitation, but, while it use to happen in many devices, early ones,
it's not as common as it use to be. I've not seen a real case of it in
any location we monitor.
--
spam999free@rrohio.com
remove 999 in order to email me
| 
XML site map