On Wed, Dec 06, 2000 at 09:19:08AM +1030, Ben Nagy wrote:
> The thing that amuses me is that NAI make a host-based security product that
> is supposed to detect / block / correct this sort of thing in realtime. 8)
Ah! Good point! I have several colos myself. I may not be
responsible for the firewalls, and routers, and network protection outside
of my servers, but I AM responsible for the servers themselves and the
software and security on them. If you have a colo, you aren't abrogating
your responsiblity for security (no matter WHAT that ISP claims), you are
compounding it because you have situated your server in an environment where
you do not control the external security. No matter how you slice it, you
have reduced your control over your external security so you have to enhance
your internal or host security.
Hmmm... Time to double check my portsentry install on those...
Opppsss... The NAI hacks where Windows systems, were they. :-)
> Oops. Forgot to install _that_ one.
> Cheers,
> --
> Ben Nagy
> Marconi Services
> Network Integration Specialist
> Mb: +61 414 411 520 PGP Key ID: 0x1A86E304
Mike
--
Michael H. Warfield | (770) 985-6132 | [EMAIL PROTECTED]
(The Mad Wizard) | (678) 463-0932 | http://www.wittsend.com/mhw/
NIC whois: MHW9 | An optimist believes we live in the best of all
PGP Key: 0xDF1DD471 | possible worlds. A pessimist is sure of it!
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
