Re: Poor practice of using a router as a firewall

[Bernd Eckenfels]

On Fri, Jul 21, 2000 at 08:58:38PM -0500, Gary Maltzen wrote:
> Theoretically a well-configured packet filter router can provide a substantial 
>roadblock to intrusion, depending as well on the internal site configuration.

Yes, weak (stateless) filters are most of the time only a problem for DOS
Attacks. This is at least true as long as you dont have to open more than
TCP Ports.

Especially for a DMZ with hardened hosts i consider a packet filtering
router to be a outer firewall which is ok most of the time.

Greetings
Bernd
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]