RE: Sources for Extranet Designs?

[Frederick M Avolio <fred () avolio com>]

At 11:35 AM 2/23/2004 -0600, Behm, Jeffrey L. wrote:
> >Never grant access to your production network or resources
>
> I was ok up until that last one...
>
> What's the point of connecting them up, if they don't get access to anything
> (isn't stuff in the DMZ *production*? Perhaps you meant
> "Never grant access to your *internal* production network or resources?"

Maybe Wes misspoke, or maybe he was subtly brilliant. (And I'll allow for 
*both* possibilities. :-))  Remember the Old Magic from the Early Times? 
That which is not expressly permitted...? Minimalism? 
(http://www.avolio.com/papers/7tenets.html) How about we start with "Never 
grant..." and then start adding the specific systems and services for which 
access is required?  Brilliant, Wes!

Fred

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards