Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 02 Apr 2000 11:37:57 +0100
From:      Brian Somers <brian@Awfulhak.org>
To:        Andre Gironda <andre@sun4c.net>
Cc:        James Wyatt <jwyatt@rwsystems.net>, Nate Williams <nate@yogotech.com>, Jim Durham <durham@w2xo.pgh.pa.us>, freebsd-security@FreeBSD.ORG
Subject:   Re: FTP with firewall rules 
Message-ID:  <200004021037.LAA01485@hak.lan.Awfulhak.org>
In-Reply-To: Message from Andre Gironda <andre@sun4c.net>  of "Sat, 01 Apr 2000 20:08:28 -0800." <20000401200828.B319@toaster.sun4c.net> 

next in thread | previous in thread | raw e-mail | index | archive | help
> Proxies are a great idea in most cases, although I think they're
> a bit restrictive.  But then again, do you really want people
> using programs like httptunnel and creating a potential security
> problem?
> 
> Have you seen http://www.detached.net/mailtunnel.html ?
[.....]

And there's an ftptunnel too...  I really think that the only way to 
really secure your network is to deny everything and then allow what 
you know.  Of course this means over-restrictive access to the 'net 
which may be unrealistic for some companies.

-- 
Brian <brian@Awfulhak.org>                        <brian@[uk.]FreeBSD.org>
      <http://www.Awfulhak.org>;                   <brian@[uk.]OpenBSD.org>
Don't _EVER_ lose your sense of humour !




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200004021037.LAA01485>