From owner-freebsd-chat Wed May 15 8:39:18 2002 Delivered-To: freebsd-chat@freebsd.org Received: from prox.centtech.com (moat2.centtech.com [206.196.95.21]) by hub.freebsd.org (Postfix) with ESMTP id 95CC037B404 for ; Wed, 15 May 2002 08:39:14 -0700 (PDT) Received: from pen.centtech.com (pen.centtech.com [10.177.178.33]) by prox.centtech.com (8.11.6/8.11.6) with ESMTP id g4FFdD703564; Wed, 15 May 2002 10:39:13 -0500 (CDT) Received: (from root@localhost) by pen.centtech.com (8.11.6+Sun/8.11.6) id g4FFdCa00554; Wed, 15 May 2002 10:39:12 -0500 (CDT) Received: from centtech.com (proton.centtech.com [10.177.173.77]) by pen.centtech.com (8.11.6+Sun/8.11.6) with ESMTP id g4FFdBY00547; Wed, 15 May 2002 10:39:11 -0500 (CDT) Message-ID: <3CE2811F.9325CAA7@centtech.com> Date: Wed, 15 May 2002 10:39:11 -0500 From: Eric Anderson Reply-To: anderson@centtech.com X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.4.2 i386) X-Accept-Language: en MIME-Version: 1.0 To: Drew Raines Cc: freebsd-chat@freebsd.org Subject: Re: internal hosts in email References: <3CE2702A.A67642FE@centtech.com> <20020515150303.GU16671@williams.mc.vanderbilt.edu> <3CE27B5F.EB6D7F4F@centtech.com> <20020515152446.GW16671@williams.mc.vanderbilt.edu> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Virus-Scanned: by AMaViS perl-11 Sender: owner-freebsd-chat@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Drew Raines wrote: > > True, it alone is not security, and I'm not betting the ranch on it > > (nor would I ever). On the other hand, less information is a good > > thing when it comes to your internal nets. > > No, you're betting the ranch on your firewall. Someone would gain > intimate knowledge of your internal network anyway should they > compromise it. How is that? Security is something that takes place throughout the network, not just on the firewall (firewalls in my case). Are you saying it's perfectly safe to bleed internal host information out to the world? What about simply removing the IP addresses, and leaving the hostnames in? Eric -- ------------------------------------------------------------------ Eric Anderson Systems Administrator Centaur Technology You have my continuous partial attention ------------------------------------------------------------------ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-chat" in the body of the message