[colug-432] Cloud services and security

[Travis Sidelinger]

I've heard of static and dynamic, but what is an "Elastic IP"?


On Mon, Feb 7, 2011 at 1:04 PM, Jason Marshall <jason.marshall at gmail.com> wrote:
> Travis,
>
> I would beg to differ on a couple of points below. This weekend I finished
> configuring a mail server out on Amazon EC2, and I have an Elastic IP
> assigned to it with Reverse DNS. I think the reverse DNS is a relatively
> recent feature addition, however.
>
> Jason
>
> On Mon, Feb 7, 2011 at 12:31 PM, Travis Sidelinger
> <travissidelinger at gmail.com> wrote:
>>
>> Anyone,
>>
>> Any colug'ers have experience with maintaining security with cloud
>> services?  We firewall everything inbound and outbound for our DMZ
>> systems, but, this has been getting increasingly difficult with cloud
>> services that like to change their IP address often.  An example is
>> Amazon's cloud.  They are not using static IP addresses and you can't
>> use reverse DNS lookups to validate their service.  A firewall rule
>> can be good for about a day before it changes.  We are planning to
>> upgrade our firewall to a Cisco product, which I'm hoping has a
>> feature that can check URL's.  If that doesn't work, I may need to
>> build a special proxy service for these that can provide URL based
>> ACLs.
>>
>> ~Travis Sidelinger
>>
>> --
>> "A careful reading of history clearly demonstrates ...
>> that people don't read history carefully.”
>>
>> _______________________________________________
>> colug-432 mailing list
>> colug-432 at colug.net
>> http://lists.colug.net/mailman/listinfo/colug-432
>
>
> _______________________________________________
> colug-432 mailing list
> colug-432 at colug.net
> http://lists.colug.net/mailman/listinfo/colug-432
>
>



-- 
"A careful reading of history clearly demonstrates ...
that people don't read history carefully.”