Dear Christine Kronberg,

Microsoft ISA Server can't filter events from Microsoft Mouse, but
Microsoft Mouse can be bound to computer. It's security risk, but I know
how to secure mouse without ISA and I accept this risk.

IPv6 can not be filtered by ISA, but it still can be filtered by
different tools, or by it's own means, as IPv6 support network-level
security. Unlike IPv4, IPv6 supports authentication, integrity checking
and encryption natively. See ipsec6.exe and descriptions for Security
Association Batabase and Security Policy Database.


--Monday, April 10, 2006, 11:34:16 PM, you wrote to 3APA3A@SECURITY.NNOV.=
RU:

CK> On Mon, 10 Apr 2006, 3APA3A wrote:
>> --Wednesday, April 5, 2006, 2:12:10 PM, you wrote to bugtraq@securityf=
ocus.com:
>>
>>
>> CK> is open for any attacks as long as they are IPv6 based. If th=
at
>> CK> is right, this is an extremly nasty bug. If ISA Server 2004 a=
nd
>> CK> Windows 2003 Basic Firewall cannot filter that stuff it shou=
ld
>> CK> simply drop it.
>>
>> You are not right.
>>
>> 1. IPv6 is not installed by default.
>> 2. If IPv6 is installed, routing is not enabled by default.
>> 3. If you install IPv6, you can be bind it to only interfaces it'=
s
>> required. To prevent IPv6 (or another routable protocol, such as IPX) =
on
>> external interface you can (and you should) unbind this protocol fr=
om
>> interface in network connection properties. ISA is not required for th=
is
>> task and is not supposed for this task.

CK> Thanks for clearing that. But: If ISA is not able to filter IPv6 s=
o
CK> why can it be bound to an interface anyway? Just to route things
CK> through? Blindly through a firewall?
CK> Another posting talks about limited filtering capabilities. Roman
CK> wrote, icmp went through. So where is the borderline? It still see=
ms
CK> to me that in the moment for what ever reason ipv6 is enabled on I=
SA
CK> the network it should secure is exposed.

CK> Cheers,

CK> Christine Kronberg.




--=20
~/ZARAZA
=CC=E0=F8=E8=ED=E0 =EE=EA=E0=E7=E0=EB=E0=F1=FC =F1=EF=EE=F1=EE=E1=ED=EE=E9=
=EA =E5=E4=E8=ED=F1=F2=E2=E5=ED=ED=EE=EC=F3 =E4=E5=E9=F1=F2=E2=E8=FE,
=E0 =E8=EC=E5=ED=ED=EE =F3=EC=ED=EE=E6=E5=ED=E8=FE 2x2, =E4=E0 =E8 =F2=EE=
=EF=F0=E8 =FD=F2=EE=EC =EE=F8=E8=E1=E0=FF=F1=FC. (=CB=E5=EC)