IPSEC

1
IPSEC
2
IPSEC - Secure communications in IP
3
Firewalls

• Filter-Based Solution
• example
• ( 192.12.13.14, 1234, 128.7.6.5, 80 )
• (,, 128.7.6.5, 80 )
• default forward or not forward?
• how dynamic?
• stateful

4
Proxy-Based Firewalls

• Problem complex policy
• Example web server
• Solution proxy
• Design transparent vs. classical
• Limitations attacks from within

5
Denial of Service

• Attacks on end hosts
• SYN attack
• Attacks on routers
• pollute route cache
• Authentication attacks
• Distributed DoS attacks

6
Network services at ND

• Files are serviced from AFS or Netfile/Webfile
• Library uses a proxy server to allow off-site
  access to ND collection
• http//eds.nd.edu/ allows directory service using
  LDAP
• Query ldapsearch -h directory.nd.edu -b
  o"University of Notre Dame",stIndiana,cUS
  uidsurendar cn mail description
• Response ndGuidnd.edu.ndzj4qv9, oupeople,
  o"University of Notre Dame", stIndiana, cUS
• cnSurendar Chandra
• mailsurendar_at_nd.edu

7
Other services

• Vpn.nd.edu
• Oracle calendar
• Secureauthenticated IMAP and SMTP