Re: Re: AirGap's... one way protection

[Frederick M Avolio <fred () avolio com>]

At 05:50 PM 10/18/00 -0500, Joe Nall wrote:
>  You don't need a firewall at all for this, just a one way serial
> connection and a little bit of software. The problem with the one way
> approach is that the box doing the pushing doesn't know if the data ever
> got to the destination.  As soon as you add an acknowledgment from the
> destination, you have a signaling channel back across the interface.

In order to have a confirmed transaction, you need a response. But what in 
the world do you mean here? All signaling channels are equally exploitable? 
Surely you're not suggesting that.

>  Variants of this have been used for decades ...  They are not popular
> because they (like the aforementioned e-Gap capability) have _very_
> limited utility in the real world.

They are incredibly popular in the places that need them.

>  FWIW, I don't buy into the e-Gap marketing at all.

Well... yes, we see that. :-)

f



_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards