Date: Thu, 11 May 2006 02:30:30 +0100 From: Daniel Bye <freebsd-questions@slightlystrange.org> To: freebsd-questions@freebsd.org Subject: Re: Is it recommended to allow all outgoing connections from your firewall?? Message-ID: <20060511013029.GA5531@catflap.slightlystrange.org> In-Reply-To: <20060511012211.12062.qmail@web51610.mail.yahoo.com> References: <20060511012211.12062.qmail@web51610.mail.yahoo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--ZGiS0Q5IWpPtfppv Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, May 10, 2006 at 06:22:11PM -0700, Mark Jayson Alvarez wrote: > Hi, >=20 > I've seen most people allow all outgoing traffic > originating from the firewall itself... Is this really > recommended?? What if the machine have been > compromised and the intruder have installed a program > that let's him access the machine remotely by having > the program itself to initiate the outgoing connection > to him thus defying the incoming connection firewall > ruleset... If that's of concern to you (and it is, I reckon, a valid concern), then you should certainly look into blocking outgoing connections from your firewall. It depends on what you consider to be acceptable risk. Dan --=20 Daniel Bye PGP Key: http://www.slightlystrange.org/pgpkey-dan.asc PGP Key fingerprint: D349 B109 0EB8 2554 4D75 B79A 8B17 F97C 1622 166A _ ASCII ribbon campaign ( ) - against HTML, vCards and X - proprietary attachments in e-mail / \ --ZGiS0Q5IWpPtfppv Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (FreeBSD) iD8DBQFEYpO1ixf5fBYiFmoRAnOaAJ4rbgppGR0YkVAn4/cedLMlMMJ/yACferib 1ZWk28rtukBHB9PA+SGfMqc= =TAii -----END PGP SIGNATURE----- --ZGiS0Q5IWpPtfppv--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060511013029.GA5531>