Microsoft pptp vpn vulnerabilities Exploits in Action

© SANS Institute 2000 - 200
                                                5
, Author retains full rights.
 
 
 
 
 
 
 
 
 
 
 
 
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46 
 
© SANS Institute 2000 - 200
5                                                                                                                 
Author retains full rights.
23
Default DENY all protocols and services.
ALLOW the following protocols:
ICMP Echo (PING) both directions
PPTP TCP both directions: tcp 1723
GRE protocol 47 both directions
DNS both directions: tcp/udp 53
HTTP outbound from LAN: tcp/udp 80
HTTPS/SSL outbound: tcp/udp 443
SMTP outbound: tcp/udp 25
SMTPS outbound: tcp 465
POP outbound: tcp/udp 110
POP3S outbound: tcp/udp 995
SSH outbound: tcp/udp 22
None of the routers nor other parts of any of the other network segments 
had any filtering rules implemented for the first parts of the lab testing. All 
advanced and improved filtering and network topography changes were made 
later, that information is not detailed in this document as it is quite vast and 
beyond the scope of this revision of this document.