LISA '03 Abstract
Tossing Packets Over the Wall Using Transmit-Only Ethernet Cables
Jon Meek and Frank Colosimo, Wyeth
Solutions for transporting packets from an insecure DMZ into an
organization's internal network are described. All of the solutions
attempt to prevent the establishment of two-way traffic by physically
cutting the transmit wires at the receiving device on the internal
network. Because alternate paths to the packet sender could exist, a
user-mode packet relay on the internal network is used to accept and
re-transmit the packets to the appropriate destination.
Applications discussed include relaying of syslog and SNMP trap
packets from DMZ systems to receiving hosts on a secure network, and
monitoring traffic for IDS and diagnostic purposes using a system
conveniently located on the secure internal network.
- View the full text of this paper in HTML or PDF.
Until October 2004, you will need your USENIX membership identification in order to access the full papers. The Proceedings are published as a collective work, © 2003 by the USENIX Association. All Rights Reserved. Rights to individual papers remain with the author or the author's employer. Permission is granted for the noncommercial reproduction of the complete work for educational or research purposes. USENIX acknowledges all trademarks within this paper.
- If you need the latest Adobe Acrobat Reader, you can download it from Adobe's site.