nanog mailing list archives
Re: Telco's write best practices for packet switching networks
From: Sean Donelan <sean () donelan com>
Date: Thu, 7 Mar 2002 16:37:51 -0500 (EST)
My comment was originally prompted by the meeting minutes which reported on the survey data showing that 100% of carriers are implementing firewalls in their gateways. The 100% is what caught my eye. As the topic comes up in various places, large ISPs repeatedly say they are unable to implement filters or packet screening on their high-speed links such as at peering points. So the self-reported 100% implementation of screening and filtering firewalls at gateways didn't seem to jive with my understanding of the limitations faced by large ISPs. Firewalls can be a useful tool in the security engineer's toolbox. But they get misused a lot. I don't believe security engineers are better programmers. If there was a class of programmers in the world that didn't make mistakes, I would hire them to write the applications. When the firewall is more complex than the application server it is "protecting" which is likely to have more mistakes?
Current thread:
- Re: Telco's write best practices for packet switching networks, (continued)
- Re: Telco's write best practices for packet switching networks Christopher L. Morrow (Mar 06)
- RE: Telco's write best practices for packet switching networks Daniel Golding (Mar 07)
- Re: Telco's write best practices for packet switching networks Rob Pickering (Mar 06)
- Re: Telco's write best practices for packet switching networks Eric Brandwine (Mar 06)
- Re: Telco's write best practices for packet switching networks Christopher L. Morrow (Mar 06)
- Re: Telco's write best practices for packet switching networks Adam McKenna (Mar 06)
- Message not available
- Re: Telco's write best practices for packet switching networks Simon Higgs (Mar 06)
- Re: Telco's write best practices for packet switching networks Steven J. Sobol (Mar 06)
- Re: Telco's write best practices for packet switching networks Christopher L. Morrow (Mar 06)
- Re: Telco's write best practices for packet switching networks Sean Donelan (Mar 07)
- Re: Telco's write best practices for packet switching networks Joe Abley (Mar 07)
- Re: Telco's write best practices for packet switching networks Christopher L. Morrow (Mar 07)
- Re: Telco's write best practices for packet switching networks Ron da Silva (Mar 08)
- Re: Telco's write best practices for packet switching networks Joe Abley (Mar 08)
- Re: Telco's write best practices for packet switching networks Christopher L. Morrow (Mar 08)