RE: HA and WAP

["K. C. Li" <li@xxxxxxx>]

> > Just be careful of the following things:
> >
> > 1. You are running a good firewall. ZoneAlarm Pro is probably the
most
> > comprehensive personal firewall available at the moment.
> >
> > 2. IIS is notorious for its vulnerabilities, probably because
hackers like
> > to attack Microsoft servers more than any other reasons. The
attached
> > shortcut will display a list of post sp1/pre sp2 fixes that you
> > should apply
> > if you want to maintain some sort of system integrity.

Further to Tim's good advise on server security, just another note of
warning if you are considering connecting your HA server on the Internet.
Make sure you spend the time and money on Internet security first, HA
second.

There has been a big increase in hacking attempts in the past week or so.
Most of the attempts have been targeting on Linux servers (for a change)
due to a number of known vulnerabilities on some of the
"standard" Linux
distributions. eg. RedHat and BIND v8.

Our Linux servers have recorded increased level of hacking attempts. In
the past couple of days, no less than 8 sustained periods of attack have
been tried on our FTP server alone. These unsuccessful attacks (most
likely Denial of Service attacks) were coming from different IP addresses
on each occasion, usually ADSL lines according to reverse lookup. The
reason, I suspect, is that ADSL lines are plentiful, always online and
some are poorly guarded. Hackers are increasingly using hacked ADSL lines
as a staging post for disguise themselves for further attacks.

Keep up the guard!

Regards,

Kwong Li
li@xxxxxxx
Laser Business Systems Ltd.
http://www.laser.com