Re: Protecting my network from rogue IoT devices.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




On Feb 29, 2016 11:24 AM, "Javier Perez" <pepebuho@xxxxxxxxx> wrote:
>
> Probably Off Topic, but maybe tangentially related to Fedora.
>
> I read with interest this forum piece about IoT devices phoning home.
>
> https://isc.sans.edu/forums/diary/IoT+The+Rise+of+the+Machines+Guest+Diary/19173/
>
> What caught my attention is the following phrase: " My home network is hardened and any new (unknown) device connected to it receives an IP address from a specific range which has no connectivity with other hosts or the Internet but its packets are logged"
>
> I imagine it is done through the Gateway Router at home. Is there any tutorial somewhere to learn how to do this? Also, what program could one use on FedoraServer or FedoraWorkstation to host the log created by the router ( I imagine some sort of dd-wrt machine). Given that journalctl took over syslog duties, could I still use syslogd to receive the data from an external router or do I have to look somewhere else for that?
>
> I wonder.
>
> --
> ------------------------------
>  /\_/\  
>  |O O|  pepebuho@xxxxxxxxx
>  ~~~~     Javier Perez
>  ~~~~          While the night runs
>  ~~~~          toward the day...
>   m m       Pepebuho watches
>                 from his high perch.
>
> --
I took a simpler approach to this; have two access points, and create 1:1 NAT mappings so that devices on the untrusted segment can access required services (smb and dns, in my case) from the trusted segment.  It does require a spare host or VM on both segments, though.

--Pete

-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux