IP Address Ranges for datacard on XT network

Forums › Spark New Zealand (including Skinny and BigPipe) › IP Address Ranges for datacard on XT network

sportz

3 posts

Wannabe Geek

#73598 16-Dec-2010 23:31

Hi there

We and some of our clients use Telecom Datacards on the XT network .. we need to do remote database updates, requiring security access to be granted to a static IP address, or IP address range e.g. 156.47.*.*
With the old network there was a set IP range, so no problem :-)
With the XT network the dynamic IP addresses allocated seem to be all over the place.
I called Telecom, they reported that there were no set ranges ... really ??

Just wondering if anyone knows?

Kind regards
Jen

johnr

19282 posts

Uber Geek
Inactive user

#418309 16-Dec-2010 23:38

Hi Jen

This is a very poor way of doing security for remote access

The IP ranges will change from time to time as they do on the Vodafone NZ packet switched network if I was you I would go back to the drawing board on this.

John

sportz

3 posts

Wannabe Geek

#418311 16-Dec-2010 23:44

Hi John

Thanks for your reply!
That's seems to be how some of the ISP website hosting providers manage remote access security to databases (as well as username and password obviously) .. unless I'm missing something, which is certainly possible ;-)

Kind regards
Jen

Zeon

3916 posts

Uber Geek

Trusted

#418317 17-Dec-2010 00:29

sportz: Hi John

Thanks for your reply!
That's seems to be how some of the ISP website hosting providers manage remote access security to databases (as well as username and password obviously) .. unless I'm missing something, which is certainly possible ;-)

Kind regards
Jen

In those cases the customers are probably on static IPs. Datacards AFAIK never have static IPs (in some cases they don't even have public IPs!).

TBH even when a static IP is used its a dated and simplistic approach to security. What kind of applications are you running? A web application?

I maintain many web and database servers and apart from inside our hosting system have the same firewall rules for every user who connects - even from our own office. Applications should be hardened without needing that level of protection.

Speedtest 2019-10-14

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#418325 17-Dec-2010 06:10

A quick searhc will give you the answer you're after

http://www.geekzone.co.nz/NealR/6460

But as pointed out it's not ideal from a security perspective and could be outdated now.

BarTender

3606 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#418330 17-Dec-2010 06:54

sbiddle: A quick searhc will give you the answer you're after

http://www.geekzone.co.nz/NealR/6460

But as pointed out it's not ideal from a security perspective and could be outdated now.

Those ranges are still valid from my understanding, I don't believe new IP ranges have been added but if it has I will ask Neal to update that blog entry.

But wouldn't it be ideal to secure it via VPN, rather than limiting via source IP. That being said I know of a few services that are doing this.

sportz

3 posts

Wannabe Geek

#418431 17-Dec-2010 10:47

That's awesome thanks so much everyone!!!!
What a fantastic resource this is :-)

Kind regards
Jen