Firewall Wizards mailing list archives

Re: Worms, Air Gaps and Responsibility


From: Einar Indridason <einari () f-prot com>
Date: Thu, 6 May 2004 11:45:37 +0000

On Wed, May 05, 2004 at 11:31:50AM -0400, Marcus J. Ranum wrote:

It's worse than that, really. People who run "production systems" used
to understand the prime directives:
        - Set it up
        - Make it work
        - Once it works, don't F with it

Don't forget the "KISS(S)" principle... "Keep it Short and Simple, (you
Stupid git)"

One issue that gives me the shiver, is Perls CPAN.  Break that, and you
will break a big chunk of the net.

costs in order to deal with this "problem" that they simply wouldn't have if they
adjusted the prime directive to:
        - Set it up on its own private network
        - Make it work
        - Once it works, don't F with it and don't hook it to another network

and:
          - Keep it Short and Simple

--
einari () f-prot com
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards


Current thread: