Date: Tue, 17 Aug 1999 13:31:18 +0930 (CST) From: "Daniel O'Connor" <doconnor@gsoft.com.au> To: "Rodney W. Grimes" <freebsd@gndrsh.dnsmgr.net> Cc: current@FreeBSD.ORG Subject: Re: Dropping connections without RST Message-ID: <XFMail.990817133118.doconnor@gsoft.com.au> In-Reply-To: <199908170356.UAA10363@gndrsh.dnsmgr.net>
next in thread | previous in thread | raw e-mail | index | archive | help
This message is in MIME format --_=XFMail.1.3.p0.FreeBSD:990817133118:5835=_ Content-Type: text/plain; charset=us-ascii On 17-Aug-99 Rodney W. Grimes wrote: > Would I use it in place of ipfw for what the original person asked > about, no way, not in a million years. If I want a box secure it > is going to have ipfw or ipfilter rules down to the last detail. > Why, well, it would prevent some junior admin from defeating policy > by starting up something we don't want anyone to connect to on that > box, like ftpd... > > IMHO, this know would give some folks a false since of security, > but not so much that I would argue about keeping it out. Well, I'm all in favour for allowing people to shoot themselves in the foot :) IMHO its OK if there is a warning about it. --- Daniel O'Connor software and network engineer for Genesis Software - http://www.gsoft.com.au "The nice thing about standards is that there are so many of them to choose from." -- Andrew Tanenbaum --_=XFMail.1.3.p0.FreeBSD:990817133118:5835=_ Content-Type: application/pgp-signature -----BEGIN PGP MESSAGE----- Version: 2.6.3ia iQCVAwUBN7jejlbYW/HEoF9pAQFyBgP+IrPrL1kIyNNtBDZDPJwrJdw+Dc1IL3G/ FKnq1pY3T6jbLkw3uCT90jYmZbO4Ih0FBQCcqpFUXoq2nGnR0JcVBjfSDDfGCcpz DOTRKvCvf0zX3cwncp+Bn+F3VghpOEggBxZmTqKx+HlCR1InNMBE6ubF7kqg33WD GPU6odFMXwk= =L0LB -----END PGP MESSAGE----- --_=XFMail.1.3.p0.FreeBSD:990817133118:5835=_-- End of MIME message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?XFMail.990817133118.doconnor>