RE: Access behind Firewall

From: Ian J. Bennett (Ian.Bennett@xxxxxxxxxxxxxxxxxx)
Date: Tue Mar 12 2002 - 09:24:43 GMT-3


   
I run a company lab ccielab accessed via a terminal server, most of us use the
lab out of office hours.

I have placed the lab in a DMZ of the firewall with a public IP address. this a
llows unresticted access from the internet to Terminal Server authenticated use
rs only.

The lab has no access to company networks and the configs are only user specifi
c and temporary, so seems to work well for us until we have an office wide VPN
solution in place.

Rgds Ian.

-----Original Message-----
From: Lab Candidate [mailto:labccie@yahoo.com]
Sent: 12 March 2002 07:40
To: ccielab@groupstudy.com
Subject: Access behind Firewall

I am looking for ideas and suggestions from you genius people.
Currently I've got a small lab at work that is behind company's firewall, as di
agram below:

   PC [Cisco LAB]
    | |
    | |
 ================Firewall
        |
    {INTERNET}
        |

I want to be able to access to the lab from home over the Internet, the firewal
l allows any
sessions established(such as telnet, ftp, web, etc.) with outside if the connec
tion is initiated
from inside the firewall. I have the ownership of the lab and the PC, but not t
he firewall. I
guess what I'm looking for is a way to kick off an outbound session from inside
 in order for me to
connect back into the firewall so I can get access to the lab. Is there any kin
d of software (or
even trojan horse :-) that allows me to have a little secret backdoor into the
firewall? I can run
any software on the PC, or maybe a proxy/relay site outside firewall both I and
 the PC can be
connected to and get hooked up? what's the best way to do it, any suggestions?
I'd appreciate it.

---


This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:57:01 GMT-3