I got the point. You are correct regarding what they are asking for.
However, it may not be what they truly want. Note the subject they had was "Outbound filter". They may actually be asking how to setup a filter (outbound) that is permit IP (address or range) all protocols, anywhere. The person clearly does not have your level of expertise. Why risk sending him on a path that could risk his career? He may be a total novice and take the advice literally, opening a company to attack. We do not know - either way, it's not a good idea. Danny H. Cox -----Original Message----- From: Chris Green [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 15, 2002 1:12 PM To: Cox, Danny H.; [EMAIL PROTECTED] Subject: RE: [gb-users] Outbound Filter? You missed the point completely. They want all inbound/outbound traffic to pass freely to the box. This is no different than plugging in direct. It was sarcasm for the most part. Chris Green -----Original Message----- From: Cox, Danny H. [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 15, 2002 3:09 PM To: Chris Green; [EMAIL PROTECTED] Subject: RE: [gb-users] Outbound Filter? That is suicide. What person would be foolish enough to connect direct? On a Windows system you are guaranteed a hack & slash job in a matter of hours if not minutes. I have worked with hardening Windows systems for some time (about 7 years) and I would rarely consider such a senseless act. Unless they want to poke around the net and try their own hacking skills, I see little benefit and lots of risk. Danny H. Cox -----Original Message----- From: Chris Green [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 15, 2002 12:45 PM To: [EMAIL PROTECTED] Subject: RE: [gb-users] Outbound Filter? Remove the firewall and plug them directly into the internet -----Original Message----- From: David Kraut [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 15, 2002 2:39 PM To: '[EMAIL PROTECTED]' Subject: [gb-users] Outbound Filter? What is the best way to give a single internal client (IP) full unfiltered access to/from the Internet? David --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] To subscribe to the digest version first unsubscribe, then e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archive of the last 1000 messages: http://www.mail-archive.com/[email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] To subscribe to the digest version first unsubscribe, then e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archive of the last 1000 messages: http://www.mail-archive.com/[email protected]
