My point is "So what if it does open a back-door?" To my knowledge, there aren't any "RDP back doors" in wireshark. This is true of wireshark, this is true of sendmail, IIS, true of anything. There are potential buffer overruns and security risks with any application that is taking data from uncontrolled sources, especially if the application is running with root / superuser privileges. That's called a security risk and poor planning.
The DMZ environment provides for a single choke-point to enforce security and access policies, and provides one single point to monitor traffic into, out of, and within the DMZ.Ī DMZ isn't just a network that has access to the internet and the internal network.
A proper DMZ will isolate hosts on the DMZ from each-other in addition to managing access between the hosts and the internet / internal network.
0 kommentar(er)
