RE: nmap fun

[Bret Watson <lists () ticm com>]

At 12:22 PM 26/10/00 -0700, you wrote:

> This sounds impossible to perform with a Gauntlet 5.5 in standard
> configuration (which, BTW, for 5.5 under Solaris will initially
> configured to respond on X, rpc, as well as several RPC service
> ports).
>
> Matt LeGrow
> Network Associates, Inc.

That last comment sounds like we might have hit the nail.... we have 
noticed that it is surprisingly hard to convince Gauntlet to disable a 
proxy that we don't want anymore.  Sure it stops permitting the traffic 
through but it still responds and runs..

NAI have promised us a visit from the asiapac FW guru... so I'll dig his 
brains on this one...

Cheers,

Bret


_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards