nanog mailing list archives

Re: I don't need no stinking firewall!


From: "Dobbins, Roland" <rdobbins () arbor net>
Date: Sun, 10 Jan 2010 06:32:18 +0000


On Jan 10, 2010, at 1:22 PM, harbor235 wrote:

Again, a firewall has it's place just like any other device in the network, defense in >>> depth is a prudent 
philosophy to reduce the chances of compromise, it does not >>>eliminate it nor does any architecture you can think 
of, period

What a ridiculous statement - of course it does.

*The place of the stateful firewall is in front of clients, not servers*.  

I'm not going to continue the unequal contest of pitting real-world operational experience against Confused Information 
Systems Security Professional brainwashing.  One can spout all the buzzwords and catchphrases one wishes, but at the 
end of the day, it's all dead wrong - and anyone naive enough to fall for it is setting himself up for a world of hurt.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

    Injustice is relatively easy to bear; what stings is justice.

                        -- H.L. Mencken





Current thread: