nanog mailing list archives

Re: [arin-announce] IPv4 Address Space (fwd)


From: "Adam Selene" <nospam () vguild com>
Date: Tue, 28 Oct 2003 18:28:55 -0600


and operating system would be safer sitting behind a "firewall"
pretty much marked the end of universal end-to-end connectivity,
and I don't see it

An OS-level (software) firewall doesn't preclude end-to-end connectivity,
and even a per-machine hardware firewall doesn't given it can pass inbound
traffic through. Most servers on the Internet are also behind hardware
firewalls, and they don't hinder end-to-end connectivity.

Last I checked most "firewall"s donĀ“t make these machines safe, it
might make them safer, so only two out of three malwares hit them.

A probably configured firewall will protect a machine against everything but
it's user, and therein lies a problem you will likely never solve.

    Adam


Current thread: