Re: Firewalls WAS:Re: Setting up a company security policy?

2001-09-12 Thread Keith Antoine
Ian Marchak wrote: > > > P.S. I *LIVE* as root on my systems as well. Know what's gonna happen > > BEFORE you hit enter. No better way to condition yourself to PAY > > ATTENTION to what you're doing :-) > > I'll leave this one for Skippy. :-) No point in leaving this to me, as i am on recor

Re: Firewalls WAS:Re: Setting up a company security policy?

2001-09-12 Thread Net Llama
This will be my final post in this thread, as its glaringly apparent that you have no clue what you're even talking about, much less, doing. --- JW <[EMAIL PROTECTED]> wrote: > At 07:23 PM 9/12/2001 -0700, you wrote: > >Do let us know if you feel the same way once your entire network is > >ow

Re: Firewalls WAS:Re: Setting up a company security policy?

2001-09-12 Thread Ian Marchak
Jay Nugent wrote: > > Greetings, > > On Wed, 12 Sep 2001, JW wrote: > >No flame from me. I don't like firewalls either. They block ONLY > those ports that you're not running servers on. But if I'm already NOT > running services on those ports, what's the point? If you are dealing with

Re: Firewalls WAS:Re: Setting up a company security policy?

2001-09-12 Thread Andrew Mathews
JW wrote: > > Oh! This is it! If I'm a screwup and I accidentally run a service I > >didn't intend to, I guess I've just exposed myself, without a firewall. > > There are as many chances of me accidently shutting down the firewall then there are >of me turning on a service unintentionally.

Re: Firewalls WAS:Re: Setting up a company security policy?

2001-09-12 Thread Andrew Mathews
JW wrote: > > > >P.S. I *LIVE* as root on my systems as well. > > Well I don't, and I suggest you don't do it either. People like you will potentially >make it possible for worms and virii to get around > on a few UNIX boxes. Man oh man, after reading what you've said in your previous message

Re: Firewalls WAS:Re: Setting up a company security policy?

2001-09-12 Thread Bruce Marshall
On Wednesday 12 September 2001 22:38 pm, Jay Nugent wrote: >    No flame from me.  I don't like firewalls either.  They block ONLY > those ports that you're not running servers on.  But if I'm already NOT > running services on those ports, what's the point? > >    Oh! This is it!  If I'm a screwup

Re: Firewalls WAS:Re: Setting up a company security policy?

2001-09-12 Thread JW
At 10:38 PM 9/12/2001 -0400, you wrote: > No flame from me. I don't like firewalls either. They block ONLY >those ports that you're not running servers on. But if I'm already NOT >running services on those ports, what's the point? Bingo. > Oh! This is it! If I'm a screwup and I acciden

Re: Firewalls WAS:Re: Setting up a company security policy?

2001-09-12 Thread JW
At 07:23 PM 9/12/2001 -0700, you wrote: >Do let us know if you feel the same way once your entire network is >owned. Oh, to be sure... Apparently you are not familiar with OTP (One time passwords) and secure >keys. True, but I don't see how what that has to do with firewalls. >No, using a dec

Re: Firewalls WAS:Re: Setting up a company security policy?

2001-09-12 Thread Jay Nugent
Greetings, On Wed, 12 Sep 2001, JW wrote: > >> 7. Firewalls > >>Need to look into firewalls and packet filters, though I fail to have > >> any confidence in them. > > > >You're not running a firewall?? > > Ah, I knew that would produce results. I admit I have not done a whole lot of >lo

Re: Firewalls WAS:Re: Setting up a company security policy?

2001-09-12 Thread Net Llama
--- JW <[EMAIL PROTECTED]> wrote: > At 09:42 PM 9/12/2001 -0400, you wrote: > >> 7. Firewalls > >>Need to look into firewalls and packet filters, though I fail to > have > >> any confidence in them. > > > >You're not running a firewall?? > > Ah, I knew that would produce results. I admit

Re: Firewalls WAS:Re: Setting up a company security policy?

2001-09-12 Thread Bruce Marshall
On Wednesday 12 September 2001 22:00 pm, JW wrote: > Ah, I knew that would produce results. I admit I have not done a whole lot > of looking into firewalls, but I must say, they seem to be fairly useless > in my sight. Rather than write a snotty retort to most of your statements, may I just say

Firewalls WAS:Re: Setting up a company security policy?

2001-09-12 Thread JW
At 09:42 PM 9/12/2001 -0400, you wrote: >On Wednesday 12 September 2001 20:13 pm, JW wrote: >> 6. Monitoring and Logs >>Need to investigate ways to monitor logs. All the professionals strongly >> advocate monitoring logs. This is a good way of catching system errors and >> failures before they