RE: Home wireless free hotspot

["Lauren Twele" <ltwele () symplified com>]

IF you want to block all employee access to web mail (e.g., Gmail,
Hotmail, Yahoo, etc) from within your corporate network:
-->THEN you should set up firewall rules as suggested by the attached 
-->email (SinglePoint not needed)

IF you want to control access by allowing only SOME employee access to
web mail...:
--> THEN you should license SinglePoint from Symplified

IF you want to audit access to web mail...:
--> THEN you should license SinglePoint from Symplified

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Adam Mooz
Sent: Wednesday, March 17, 2010 8:32 AM
To: John Morrison
Cc: security-basics () securityfocus com
Subject: Re: Home wireless free hotspot

Assuming you're going to go with a dual-AP setup (highly recommended)
you could put an Untangle box infront of the AP (between the AP and the
modem) and monitor who's doing what, this at least gives you the option
to point a finger at someone else (if Untangle handles the DHCP).  You
can also block protocols, access to specific sites, and a whole host of
other things that will help mitigate your liability by simply denying
access to those sites.  Coupled with a disclaimer and you should be
golden.

-----------------------------------------------------------------
Adam Mooz
Adam.Mooz () gmail com
http://www.AdamMooz.com

On 2010-03-16, at 5:15 PM, John Morrison wrote:

> The legal position depends on the country you are in.
>
> Most countries have coffe shops, and such like, that provide wireless
> access to anybody. To get round the liability issues they have a
> screen appear that says how the service can and cannot be used and
> that the user indemnifies the wireless provider against all problems.
>
> As others have said you may be in breach of contract with your ISP and
> they could disconnect you. But this is not criminal. Just a civil
> breach of contract.
>
> In the UK and Europe a company called FON offers a package to allow
> you share your wireless Internet access.
> (http://www.fon.com/en/info/whatsFon) You can even decide how much of
> your Internet bandwidth you want to share.
>
>
>
> On 16 March 2010 18:32,  <ron () hotmail com> wrote:
> > Although your intent is "noble", I think you are asking for a whole
lot of trouble.  Sure your "intended audience", the neighbors MAY take
advantage of it.  But, how many typical home users are they technically
savy enough to figure it out?  More likely you will be found by a
wardriver/hacker and shared with others for less than legal purposes.
> > Then when it is discovered you are going to have to explain why it
was left open.  You will be stuck with the fact that you intended for
other, unknown, people to freely use it.  So even though you didn't do
any of the actions some of the mud may still stick to you.
> > If you want to share with neighbors, you are better off setting up a
secured connection you can share with limited audience for their
"emergency" use.
> >
------------------------------------------------------------------------
> > Securing Apache Web Server with thawte Digital Certificate
> > In this guide we examine the importance of Apache-SSL and who needs
an SSL certificate.  We look at how SSL works, how it benefits your
company and how your customers can tell if a site is secure. You will
find out how to test, purchase, install and use a thawte Digital
Certificate on your Apache web server. Throughout, best practices for
set-up are highlighted to help you ensure efficient ongoing management
of your encryption keys and digital certificates.
> >
http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
> >
------------------------------------------------------------------------
> >
------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an
SSL certificate.  We look at how SSL works, how it benefits your company
and how your customers can tell if a site is secure. You will find out
how to test, purchase, install and use a thawte Digital Certificate on
your Apache web server. Throughout, best practices for set-up are
highlighted to help you ensure efficient ongoing management of your
encryption keys and digital certificates.
>
http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
>
------------------------------------------------------------------------
>


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an
SSL certificate.  We look at how SSL works, how it benefits your company
and how your customers can tell if a site is secure. You will find out
how to test, purchase, install and use a thawte Digital Certificate on
your Apache web server. Throughout, best practices for set-up are
highlighted to help you ensure efficient ongoing management of your
encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------