Re: mitigating the lack of a firewall

["R. DuFresne" <dufresne () sysinfo com>]

As lastweek proved, if someone is intent upon DOSing yer connection,
there's not too much you can do, and certainly nothing proactively, to
prevent the service loss.

As to IIS4.0 and NT, well, locking up such a system can be quite a chore,
and some might argue a chore of impossiblilty.  A look at the BugtraQ
archives on NT and IIS4.0 might make ya a tad queasy.  I personally feel
NT is not up to the same tasking as uni* systems tend to be.

Thanks,


Ron DuFresne

On Sat, 12 Feb 2000, Bruce H. Nearon wrote:

> Suppose an Internet site does not have a firewall.  Can a securely
> configured IIS 4.0 server running under securely configured NT 4.0
> protect the site from unauthorized access and denial of service attacks?
>
> Bruce Nearon, CPA
> The Cohn Consulting Group
> Roseland, New jersey

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        admin & senior consultant:  darkstar.sysinfo.com
                  http://darkstar.sysinfo.com

"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation."
                -- Johnny Hart

testing, only testing, and damn good at it too!