On Mon, 4 Dec 2000, Roy G. Culley wrote:
> What about normal ftp (not PASV), IIOP, net-meeting, sun-rpc, etc?
> Keeping state is necessary if you are to have any chance of allowing
> these without opening up huge holes in your firewall.
Allowing any of these other than perhaps net meeting *is* opening a huge
hole in your firewall, and I wouldn't put all that much trust in net
meeting. If you have to allow things like FTP or rpc then start
questioning why you even _have_ a firewall, because you're likely relying
on a placebo to cure you, and you have testicular cancer.
Paul
-----------------------------------------------------------------------------
Paul D. Robertson "My statements in this message are personal opinions
[EMAIL PROTECTED] which may have no basis whatsoever in fact."
PSB#9280
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]