Re: [LCtalk] Internet connection to the Lanbox

[Matthijs van Duin]

On Mon, Jun 05, 2006 at 06:40:50AM -0400, Carl Byrne wrote:
> Good advice, but in this particular arrangement, the Lanbox will be 
> connected only at a predetermined time for remote update purposes. 
> There is a logon function to the Lanbox, although I don't believe there 
> is any facility for looking out someone after a certain number of 
> failed attempts.
>
> I have not spoken with the customer's network admin yet, so do not know 
> how savvy the individual is.

It may indeed be wise to see if a VPN or such can be used, instead of 
making the lanbox port 777 public.

The password of the LanBox itself may be a bit easily guessable (since 
it's always a small number) and even if not, it would open up the LanBox 
to easy denial-of-service attacks.

If VPN is not an option, an alternative would be to use port mapping to 
put the LanBox on a strange port number, like 21724 or whatever.  This 
would make harder to find by attackers.

--
Matthijs van Duin  --  May the Forth be with you!