On Wed, 7 Nov 2007 14:53:06 -0800, Stu Larson
<StuLarson@discussions.microsoft.com> wrote:
>> Sorry, you're pissing in the wind. (See, you CAN say "piss" here).
>>
>> The world is going to routable protocols, and simplifying the protocol stack on
>> their computers. You won't be able to stay on Windows XP forever.
>>
>> If you can support yourself on your own, fine, then stay with Windows XP and
>> earlier. But as soon as the bad guys develop an attack that involves IPX/SPX in
>> any way, you'll really be on your own. No experts to help you sort your
>> problems.
>>
>> Are your computers anywhere connected to the Internet, or are they in a sealed
>> room somewhere? If any computers need Internet access for any reasons, you'll
>> need a proxy server that uses IPX/SPX on the client side. Or you'll be using
>> dual protocol stacks on your computers, and you'll still be at risk.
>Hi Chuck
>
>I take your point about IPX/SPX attacks. I know it’s possible to ‘tunnel’
>IPX on the Internet inside IP. However since I block IP 99% of the time a
>tunnel attack is pointless.
>
>Perhaps it would help to explain that while I use my private IPX network
>heavily, I only use the Internet for a few minutes a day. Reducing exposure
>is a simple way of reducing risk.
>
>What works for me is a nightmare for others but we’re not all the same.
>
>Thanks for your candour
>
>Regards
>
>Stu
>
>Ps… Piss… there… I feel liberated!
We piss and moan here a lot, Stu. And I feel your pain. I have one guy asking
me for an IPX based proxy solution, but adding the IP services that he thinks he
needs, and tunneling them through IPX, will be a nightmare.
So I have to convince him that a solid, secure, IP system will be better in the
long run. He uses the Internet a lot more than a few minutes a day, too. Some
days a LOT more. But he's convinced that IPX keeps him safer.
I could sell him something crappy, and move on, but I won't. So I'm in the
fight. Maybe he'll retire before I do.
With Vista coming into the marketplace, and with no IPX/SPX in Vista, support
for IPX/SPX is going to drop dramatically. You have to prepare for the future.
Any security plan, that depends upon unsupported components, has no future. And
security without a future isn't security.
--
Cheers,
Chuck, MS-MVP 2005-2007 [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.