RE: comments

[Dan Hollis <goemon@anime.net>]

On Mon, 16 Jun 2003, Smith, Donald wrote:
> > On Mon, 16 Jun 2003, George M. Jones wrote:
> > > Requirement:
> > > The device MUST NOT allow any remote access for management without
> > > explicit configuration of authenticaiton and authorization.
> > > Example:
> > > It should not be possible to use a well know default 
> > password to remotely
> > > manage a newly installed device using standard management protocols
> > > (telnet, SNMP, SSH ...) manage a newly installed device on any externally acessable interface.
> What I am worried about is someone moving telnet to port 53 and saying its non standard
> so it passes are requirement. 

It wouldnt pass the requirement stating explicit configuration of 
authentication and authorization.

-Dan
-- 
[-] Omae no subete no kichi wa ore no mono da. [-]