Fresh System Administrator

Quote:

---

Originally posted here by PacketThirst
Hey folks !! ..
The former
administrator advised me not to put up a firewall as it would really slowdown the connection(
64kbps :mad: ).He thinks that noone would ever wanna hack into the network. I know its not
safe to practice security by obscurity. There isn't any data of great importance too in these
systems.The network is just used for students to access the internet. I know there
are a lot of experienced people out there in AO. I really need your advice.

---

Your former administrator is an idiot. You'll need some sort of firewall to protect your network - hardware, software, doesn't matter, but you'll be needing something. I'm wondering if that's part of the reason he is the 'former' administrator? Anyway, just because you have the perception that no one wants to gain access to your network doesn't mean that that's the reality - the home user is the perfect example. A typical home user may think that no one wants access to their PC, but if that's the case why all these worms and such?

A properly configured firewall is not going to slow your connection down - and it's a must you provide some sort of protection for your your network, your users, and any other resources on that network. GET A FIREWALL!

even if you dont have much data to compromise, they can still use your boxes as drones.

Most firewall setups should operate at line speed or close to it unless there is some sort
of encryption going on. That can and often does slow things down a bit.

I'm guessing you don't plan to terminate any VPN connections with your baby link
to the net.

So whats up with such a small link?
Get the firewall AND a new connection!! :)

Cheers,

SGS

Quote:

---

Get the firewall AND a new connection!!

---

Yeah, the connection is less that $100 if you have to get a business cable connection, (closer to $40 if you can drag a DSL there or the cable company gives you a break for being an educational institution).... Course, IIRC, you are in India.... Which might negate my whole response.... :o

ok enough with the simple get a firewall stuff... although it is important.
if it is not so already, enforce username and lpassworded log ins, set it to require a password change every month or so and to enforce somewhat of a strong password. at least 8 char.
monitor bandwith usage. set the user accounts not to be able to install software, unless approved.
use a seriously strong password on the admin account(if present) on the workstations.

And also to all the above.If your network has been that open take a good look at your clients and see what they have running, just to make sure you havn't got some sort of pron or warez server.

What's the time now for an unprotected machine to be on the internet before it's compromised? 12 minutes I think I heard... Maybe it's 20. Either one is too short for me. It will probably only be some lame worm that infects it, it's still a pain to fix or rebuild.

Tell your old admin this... If he wants to see slow internet connectivity wait untill some of those machines on your network have some worm chowing down on your bandwidth. Ask anyone who's been there. It's a pain unless you like working late nights and weekends.

Good Luck!

/quote use a seriously strong password on the admin account(if present) on the workstations. /endquote

WIPE the admin account (if present) on the workstations. Install a 'ghost image' of what should actually be on their systems on the server. Setup the workstations to reinstall this image weekly. Force the users to backup their personal docs and explain that if they don't, they're gone forever. Don't let them install jack without you standing over their shoulder watching with a loaded gun and their termination papers to their head. Constantly review your sniffer logs to make sure they're not cheating - if they are, shoot them before you have them fired. Shoot them twice if they're downloading Pron from beyond.

Oh, and get a faster connection. It's well worth the investment if you can present the need correctly to those who hold the purse strings.

What college runs a 64K!?!?! and for the love of GOD get a firewall, and a firewall router. I am the admin for my highschool and the former admin was kinda like yours, had no need for security, before I was granted admin status, I was just a good ole hacker and was in and out of that network so many times from the inside and out. also, look over every bit of data, because the old admin never caught on that I had crammed the server full of music and data. and dont be foolish, if you can think it, it could happen, and most likely will, keep backups on a portable harddrive, it saves hours of stress in a crash or hack...

Also, keep your actual server in a secure place. and switches, routers, etc. AND make sure that there is no 802.11x running somewhere, because most likely there is one up somewhere and it is VERY insecure...

much needed software: ettercap, snort, nmap.. and the list goes on...

<marquee>Shugart</marquee>

lol actually from experience, NOT putting a firewall will make ur network slower to the point that ud think its dead. few months ago my collage was hit by SASSER coz the firewall was down for some bloody reason. and for weeks, we couldnt even load a single web page, it kept timming out.