Frame relay security

From: Lyndon David (lyndondat_private)
Date: Mon Apr 20 1998 - 04:30:44 PDT

  • Next message: Damir Rajnovic: "Re: Intrusion Detection and Secuirty Policy"

    This is a cryptographically signed message in MIME format.
    
    --------------ms9539B8600836457575401089
    Content-Type: text/plain; charset=us-ascii
    Content-Transfer-Encoding: 7bit
    
    Dear Wizards,
    
    I am working on a very big job where we are putting in firewalls in
    three datacenters on three continents. Bigcorp currently has all its
    intersite traffic going over Frame relay world wide and does not encrypt
    it. We said, that is a very bad idea as your data has a very high value
    if it gets out ahead of the announcements. You should encrypt it, better
    than that you should put your site to site traffic through these nice
    firewalls that we are putting in for you and not only encrypt it but use
    the firewalls to control access between sites.
    
    They said, we asked our frame relay provider if they are secure and they
    said yes and we believe them. I said, they can say that but I dont
    believe it for a minute.
    
    
    So to cut a long and tedious conversation short I would very much like
    to hear from anyone stories of how frame relay connections have been
    tampered with so that the traffic can be listened to. Listening is
    enough, the data does not have to be changed.
    
    EG. A long time ago I heard a story of how an ISDN connection between
    two sites was listened to by sending in a false maintenance note that
    meant that the engineer put the switch into maintence mode. Mr
    evesdropper then was able to connect to the maintence interface of the
    switch and listen to everything going past.
    
    Any info would be good, specifics cases with names changed to protect
    the non so innocent would be better. Please feel free to send me
    specifics under cover of the woefully inadaquate export grade SMIME key.
    For the truly paranoid you can find a mans strength key at
    www.belsign.com
    
    www.belsign.com
    
    Thanks for your time.
    
    
    Lyndon David
    
    --------------ms9539B8600836457575401089
    Content-Type: application/x-pkcs7-signature; name="smime.p7s"
    Content-Transfer-Encoding: base64
    Content-Disposition: attachment; filename="smime.p7s"
    Content-Description: S/MIME Cryptographic Signature
    
    MIIKngYJKoZIhvcNAQcCoIIKjzCCCosCAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHAaCC
    CNcwggQhMIIDiqADAgECAhBkMRqXtBDl7JzNgohhybsyMA0GCSqGSIb3DQEBBAUAMGIxETAP
    BgNVBAcTCEludGVybmV0MRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjE0MDIGA1UECxMrVmVy
    aVNpZ24gQ2xhc3MgMSBDQSAtIEluZGl2aWR1YWwgU3Vic2NyaWJlcjAeFw05ODAzMzAwMDAw
    MDBaFw05OTAzMzAyMzU5NTlaMIIBHTERMA8GA1UEBxMISW50ZXJuZXQxFzAVBgNVBAoTDlZl
    cmlTaWduLCBJbmMuMTQwMgYDVQQLEytWZXJpU2lnbiBDbGFzcyAxIENBIC0gSW5kaXZpZHVh
    bCBTdWJzY3JpYmVyMUYwRAYDVQQLEz13d3cudmVyaXNpZ24uY29tL3JlcG9zaXRvcnkvQ1BT
    IEluY29ycC4gYnkgUmVmLixMSUFCLkxURChjKTk2MTMwMQYDVQQLEypEaWdpdGFsIElEIENs
    YXNzIDEgLSBOZXRzY2FwZSBGdWxsIFNlcnZpY2UxFTATBgNVBAMTDEx5bmRvbiBEYXZpZDEl
    MCMGCSqGSIb3DQEJARYWbHluZG9uZEBzZW50aW5ldC5jby51azBcMA0GCSqGSIb3DQEBAQUA
    A0sAMEgCQQDDXDAjic1QgJVhrDKKkHWHYnl6bo76IwXuBE1tb7Qvoegvo1uNR1sMWc/HYw8O
    7Pa5zAME0RfRqMvT8UE0MbAnAgMBAAGjggFdMIIBWTAJBgNVHRMEAjAAMIGvBgNVHSAEgacw
    gDCABgtghkgBhvhFAQcBATCAMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy52ZXJpc2lnbi5j
    b20vQ1BTMGIGCCsGAQUFBwICMFYwFRYOVmVyaVNpZ24sIEluYy4wAwIBARo9VmVyaVNpZ24n
    cyBDUFMgaW5jb3JwLiBieSByZWZlcmVuY2UgbGlhYi4gbHRkLiAoYyk5NyBWZXJpU2lnbgAA
    AAAAADARBglghkgBhvhCAQEEBAMCB4AwgYYGCmCGSAGG+EUBBgMEeBZ2ZDQ2NTJiZDYzZjIw
    NDcwMjkyOTg3NjNjOWQyZjI3NTA2OWM3MzU5YmVkMWIwNTlkYTc1YmM0YmM5NzAxNzQ3ZGE1
    YzFlMzE0MWJlYWRiMmJiMTllODExM2JkNjI4OWIzMTE0OTk3YTBiYjQzZjRlNTkxNjU0MTAN
    BgkqhkiG9w0BAQQFAAOBgQAMDv48W5Dn6bUr5ZzbNCzrQqA+1pf596DtKzuK8cekFJrCwqFu
    4gSlSGuwggU/sQ3jMLxAsgWJr60txBJZaSThQwNpVbYEI90qyR2tcKIAp2yyymdhTrqkYIlq
    APteYdlEI5j7snl5FVJm9YjEXK4aiFt19lhfrCKG/Hdd7CIF4DCCAnkwggHioAMCAQICEFIf
    NR3ycH4AK77KWYcE1TkwDQYJKoZIhvcNAQECBQAwXzELMAkGA1UEBhMCVVMxFzAVBgNVBAoT
    DlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5DbGFzcyAxIFB1YmxpYyBQcmltYXJ5IENlcnRp
    ZmljYXRpb24gQXV0aG9yaXR5MB4XDTk2MDYyNzAwMDAwMFoXDTk5MDYyNzIzNTk1OVowYjER
    MA8GA1UEBxMISW50ZXJuZXQxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTQwMgYDVQQLEytW
    ZXJpU2lnbiBDbGFzcyAxIENBIC0gSW5kaXZpZHVhbCBTdWJzY3JpYmVyMIGfMA0GCSqGSIb3
    DQEBAQUAA4GNADCBiQKBgQC2FKbPTdAFDdjKI9BvqrQpkmOOLPhvltcunXZLEbE2jVfJw/0c
    xrr+Hgi6M8qV6r7jW80GqLd5HUQq7XPysVKDaBBwZJHXPmv5912dFEObbpdFmIFH0S3L3bty
    10w/cariQPJUObwW7s987LrbP2wqsxaxhhKdrpM01bjV0Pc+qQIDAQABozMwMTAPBgNVHRME
    CDAGAQH/AgEBMAsGA1UdDwQEAwIBBjARBglghkgBhvhCAQEEBAMCAQYwDQYJKoZIhvcNAQEC
    BQADgYEAwfr3AudXyhF1xpwM+it3T4dFFzvj0sHaD1g5jq6VmQOhqKE4/nmakxcLl4Y5x8po
    NGa7x4hF9sgMBe6+lyXv4NRu5H+ddlzOfboUoq4Ln/tnW0ilZyWvGWSI9nLYKSeqNxJqsSiv
    J4MYZWyN7UCeTcR4qIbs6SxQv6b5DduwpkowggIxMIIBmgIFAqQAAAEwDQYJKoZIhvcNAQEC
    BQAwXzELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5D
    bGFzcyAxIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTk2MDEy
    OTAwMDAwMFoXDTk5MTIzMTIzNTk1OVowXzELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlT
    aWduLCBJbmMuMTcwNQYDVQQLEy5DbGFzcyAxIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRp
    b24gQXV0aG9yaXR5MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDlGb9to1ZhLZlIcfZn
    3rmN67eehoAKkQ76OCWvRoiC5XOooJskXQ0fzGVuDLDQVoQYh5oGmxChc9+0WDlrbsH2FdWo
    qD+qEgaNMax/sDTXjzRniAnNFBHiTkVWaR94AoDa3EeRKbs2yWNcxeDXLYd7obcysHswuiov
    Maruo2fa2wIDAQABMA0GCSqGSIb3DQEBAgUAA4GBAFJzuppV3Nw/gn2wkJhiKoJMdgBuJT3V
    wglwVwEMD3cfGKH7HGAOoHU7SSFB/qdcLUxCSdP/KNiM6p3+yQfid4JTI95V885Ek/r6TL3K
    NvNbZrKeyPIMXl7UobQhCTPKO1n8ksI4/K3ZliTgLfqjKfUzaHhOtLyfaTXiqJiUczvEMYIB
    jzCCAYsCAQEwdjBiMREwDwYDVQQHEwhJbnRlcm5ldDEXMBUGA1UEChMOVmVyaVNpZ24sIElu
    Yy4xNDAyBgNVBAsTK1ZlcmlTaWduIENsYXNzIDEgQ0EgLSBJbmRpdmlkdWFsIFN1YnNjcmli
    ZXICEGQxGpe0EOXsnM2CiGHJuzIwCQYFKw4DAhoFAKCBsTAYBgkqhkiG9w0BCQMxCwYJKoZI
    hvcNAQcBMBwGCSqGSIb3DQEJBTEPFw05ODA0MjAxMTMwNDRaMCMGCSqGSIb3DQEJBDEWBBTg
    jQt8ngSaayy9UPhma1AYXhb4kzBSBgkqhkiG9w0BCQ8xRTBDMAoGCCqGSIb3DQMHMA4GCCqG
    SIb3DQMCAgIAgDAHBgUrDgMCBzANBggqhkiG9w0DAgIBQDANBggqhkiG9w0DAgIBKDANBgkq
    hkiG9w0BAQEFAARAZRLgZgOUdAG2oClfpjmPv9I4WSZZh++2HUByRQtS9TBTHwaE1F8Th4sG
    vF/eVRC+GYPa2b2qhPFzb29/Fg459g==
    --------------ms9539B8600836457575401089--
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 12:55:33 PDT