Quick Security Question/Poll

[uselessinfoguru]

Possible debate among people with different views but, how secure is Whitelisting the firewall in a Vici system? Is is not still vulnerable to spoofed IP addresses and Man in the Middle attacks?

[mflorell]

If someone wants to bad enough, they can get into your system given enough time and resources. Of course that's usually extremely rare, and what you really need to worry about is the opportunistic hacker that port scans you and just wants to steal your data or your SIP carrier credentials. For those hackers, whitelisting is pretty effective if you set it up right.

[uselessinfoguru]

Port Scanning won't work if ping is off (provided they aren't spoofing a good IP address) correct?

[mflorell]

That's correct.

[alo]

I noticed that when I disable ping, I am not able to ping even from addresses I add to yast as safe. Is there a way around that? I noticed that the dialing servers and Database like to ping each other on reboot and sometimes the office likes to ping the servers for connectivity reasons.