Search | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | R | S | T | U | V | W | X | Y | Z

Index: D

daemons, tools for : Daemons
data : Your Data
- communications protocols : (see TCP/IP)
- DNS : DNS Data
- - mismatched : Mismatched data between the hostname and IP address DNS trees
- protecting from sniffers : Packet Sniffing
- theft of : (see information theft)
- - espionage : Spies (Industrial and Otherwise)
- transferring
- - Packet Filtering
  - (see email; files, transferring)
  - allowing/disallowing : Why Packet Filtering?
  - via TCP : TCP
- user-specified, and proxying : User-Specified Data
data-driven attacks : Electronic Mail
datagrams : The datagram
- fragmenting : Fragmenting datagrams
DCC (Direct Client Connections) : Internet Relay Chat (IRC)
DDN (Defense Data Network) : Internet Routing Architecture
debugging
- Current filtering tools are not perfect
- (see also bugs)
- operating system : Fix all known system bugs
dedicated proxy servers : Generic Versus Dedicated Proxies
default deny stance
- Default Deny Stance: That Which Is Not Expressly Permitted Is Prohibited
- Default Permit Versus Default Deny
default permit stance
- Default Permit Stance: That Which Is Not Expressly Prohibited Is Permitted
- Default Permit Versus Default Deny
Defense Data Network (DDN) : Internet Routing Architecture
defense in depth
- Defense in Depth
- Defense in depth
- Defense in depth
delivery agent, email : Electronic Mail
Demilitarized Zone (DMZ) : Some Firewall Definitions
denial of service : Denial of Service
- accidental : Stupidity and Accidents
designing firewalls : Buying Versus Building
destination unreachable codes : (see ICMP)
diagramming the system : Labeling and Diagraming Your System
dictionary attacks : One-Time Passwords
Direct Client Connections (DCC) : Internet Relay Chat (IRC)
disabling Internet services : Disabling Nonrequired Services
disabling routing : (see routing, disabling)
disconnecting after incident : Disconnect or Shut Down, as Appropriate
disconnecting machine : Planning for Disconnecting or Shutting Down Machines
disk space : (see memory/disk space; resources)
disks, needs for : What Hardware Configuration?
diversity of defense systems : Diversity of Defense
DMZ (Demilitarized Zone) : Some Firewall Definitions
DNS (Domain Name Service)
- Name Service
- Selecting Services Provided by the Bastion Host
- configuring : Domain Name System (DNS)
- - in screened host architecture : DNS
  - in screened subnet architecture : DNS
  - without hiding information : Setting up DNS Without Hiding Information
- data : DNS Data
- fake server : Set up a `fake' DNS server on the bastion host for the outside world to use
- hiding information with : Setting Up DNS to Hide Information
- revealing information to attackers : Revealing too much information to attackers
- server for internal hosts : Set up a real DNS server on an internal system for internal hosts to use
documenting
- incidents : Document the Incident
- plan for : Planning for Documentation
- system after incident
- - Snapshot the System
  - Planning for Snapshots
Domain Name Service : (see DNS)
dot (.) files, disabling creation of : Be careful of writable directories in the anonymous FTP area
double-reverse lookups
- Mismatched data between the hostname and IP address DNS trees
- Set up a `fake' DNS server on the bastion host for the outside world to use
Drawbridge package : Drawbridge
dual-homed hosts
- Proxy Systems
- (see also proxy services)
- architecture of : Dual-Homed Host Architecture
- - with screen subnet architecture : It's OK to Use Dual-Homed Hosts and Screened Subnets
- as firewall : Turning off routing
- nonrouting : Nonrouting Dual-homed Hosts
- proxy services and : (see proxy services)
dynamic packet filtering : UDP
- FTP and : Packet filtering characteristics of FTP

Search | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | R | S | T | U | V | W | X | Y | Z