How secure is a fax board ? That depends how you use it.

adamsb@un.org
Tue, 25 Oct 94 13:52:21 EST

> be perfectly secure against modem intruders (esp. when running in a file
> server together with Ch*y*nn* FaxServe).

Incoming fax connection should be password and account-id protected if the
server is used for store and forward fax switching.  This approach
applies to a network of fax switches.  Don't use Unix operating system for
the fax switches.

If incoming fax is from a fax machine, not from another fax switch,
whatever comes in should be intercepted to a operator at a workstation
unless it is automatically converted to text.  A custom built fax server
can have both password protected lines for other fax switches and
unprotected lines for public dial-in.  Anything from the public dial-in
containing a correct network address can be automatically converted from
fax to text and shipped to recipient as text e-mail.  Anything without a
correct address, or where the fax to text conversion failed, can be
intercepted to an operator.  This box will only accept incoming fax format
files, any other kind of data is automatically discarded.  The operating
system is not Unix and TCP/IP cannot be run through the fax boards.
CompLink is a close business partner of Ch*y*nn* and builds such boxes to
order.

> illegal features of the fax board)??? How would you connect a fax board
> to the network of a security hysteric network admin ;-) ???

Put small router between the network and the PC with the fax board.
Set up packet filters on router to block all incoming connections from the
PC.  This will provide outgoing fax service only.  Unless you are running a
Complink box you will probably not be sending incoming fax across the
network anyway because the fax image files are too big to handle
conveniently.

                                                  Hog Farmer