Firewall Wizards mailing list archives

Re: Question about setting up PIX firewall


From: "Paul D. Robertson" <paul () compuwar net>
Date: Thu, 17 Nov 2005 05:37:50 -0500 (EST)

On Tue, 8 Nov 2005, Carric Dooley wrote:

Matthew... posting your firewall config (esp. in its entirety, an 
apparenlty mostly unchanged) is a HUGE no-no.  Somone footprinting your 
company now has a lot of good info how to smack you down...

If your ruleset is sane, it really shouldn't matter.  Just like posting 
the source to encryption algorithms, it's only really an issue if you have 
a significant flaw.  No gaping holes and there shouldn't be anything an 
attacker couldn't derrive from traffic they generated.

Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
paul () compuwar net       which may have no basis whatsoever in fact."
http://fora.compuwar.net      Infosec discussion boards 

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards


Current thread: