Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Posting-Version: version B 2.10.2 9/18/84; site watmath.UUCP
Path: utzoo!watmath!jmsellens
From: jmsellens@watmath.UUCP (John M Sellens)
Newsgroups: net.unix-wizards,net.dcom
Subject: Re: Dial Back isn't always secure
Message-ID: <11727@watmath.UUCP>
Date: Fri, 1-Mar-85 03:04:05 EST
Article-I.D.: watmath.11727
Posted: Fri Mar  1 03:04:05 1985
Date-Received: Fri, 1-Mar-85 21:09:11 EST
References: <112@hydra.UUCP>
Reply-To: jmsellens@watmath.UUCP (John M Sellens)
Distribution: net
Organization: U of Waterloo, Ontario
Lines: 17
Xref: watmath net.unix-wizards:12221 net.dcom:880
Summary: 

Dave Emery's article is very informative and raises a number of good points.

If I may add my 2 cents worth:

Perhaps part/all (although "all" would be too much to hope for) of the risk
associated with the dial-out line can be alleviated in one of two ways.
1 - always use a local line to call out.  By this I mean an extension line
    on your internal PBX, and dial 9 for an outside line.  The specific
    outside line would be harder (hopefully) for the cracker to determine,
    and perhaps PBX's are smarter at avoiding such line collisions.
2 - Use call forwarding on the outgoing line.  Have all incoming calls on
    the outgoing line forwarded to the incoming line.  This has the
    advantage that even small organizations can use it and it's simple.

Thanks Dave!

John