Re: Firewalls that generate new packets..

["Marcus J. Ranum" <mjr () ranum com>]

Darren Reed wrote:
> If I can run IPoverDNS through your "layer 7 firewall", is it
> really being a "layer 7 firewall" or a "layer 5 firewall"?

I don't think that covert channels can be eliminated in the
context of "firewall" -- after all, a "firewall" is just one big
juicy mess of overt channels. :)

mjr.

_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards