:: Re: [DNG] Remote administation
Góra strony
Delete this message
Reply to this message
Autor: Rick Moen
Data:  
Dla: dng
Temat: Re: [DNG] Remote administation
Quoting Hendrik Boom (hendrik@???):

> IPMI is presuably the same protocol described as "The most dangerous
> protocol you've never heard of"?
>
> http://www.itworld.com/article/2708437/security/ipmi--the-most-dangerous-protocol-you-ve-never-heard-of.html>


For that reason, IPMI ports need to be at _least_ confined by VLAN
tagging to a special service network with no direct public access
whatsoever, if not physically separate. Have mandatory VPN access
controls to get to that network, and watch it like a hawk. Never, ever
let those ports be public-facing.