Security Basics mailing list archives
RE: what should I do when....
From: "Nick Vaernhoej" <nick.vaernhoej () capitalcardservices com>
Date: Thu, 10 Jul 2008 10:27:38 -0500
Adriel, what if the OP isn't hosting any publicly accessible services? Ansgar, I know the email disclaimer is hogwash, but the company requires it so I can't do much about it. Nick Vaernhoej "Quidquid latine dictum sit, altum sonatur." - -----Original Message----- - From: Adriel Desautels - Sent: Wednesday, July 09, 2008 10:00 AM - - Ansgar, - You can not bullet proof a computer system by using a firewall - even if - you block all traffic to and from that system. In most configurations - firewalls block inbound connection attempts to *internal* systems, - while - they permit outbound attempts from those systems. - - It is my opinion that firewalls are not security devices as much - as - they are traffic shaping devices. Their job is to control network - connections and the flow of traffic, not to ensure that something - can't - be hacked. - - --------------------------------------------------------------- - Netragard, LLC - http://www.netragard.com - "We make IT Safe" - Penetration Testing, Vulnerability Assessments, Website Security - - Netragard Whitepaper Downloads: - ------------------------------- - Choosing the right provider : http://tinyurl.com/2ahk3j - Three Things you must know : http://tinyurl.com/26pjsn - - - Ansgar -59cobalt- Wiechers wrote: - > On 2008-07-08 Weir, Jason wrote: - >> Quote of the day.... - >> - >> "Bullet-proofing your systems is as easy as using a firewall" - >> - >> If it was only true.... - > - > It is quite true, you're just underestimating the task of - maintaining a - > firewall. - > - > Regards - > Ansgar Wiechers This electronic transmission is intended for the addressee (s) named above. It contains information that is privileged, confidential, or otherwise protected from use and disclosure. If you are not the intended recipient you are hereby notified that any review, disclosure, copy, or dissemination of this transmission or the taking of any action in reliance on its contents, or other use is strictly prohibited. If you have received this transmission in error, please notify the sender that this message was received in error and then delete this message. Thank you.
Current thread:
- RE: what should I do when...., (continued)
- RE: what should I do when.... Rivest, Philippe (Jul 11)
- Re: what should I do when.... Adriel Desautels (Jul 11)
- RE: what should I do when.... William Mohney (Jul 11)
- Re: what should I do when.... Adriel Desautels (Jul 11)
- RE: what should I do when.... William Mohney (Jul 11)
- Re: what should I do when.... Adriel Desautels (Jul 11)
- Re: what should I do when.... Mike Hale (Jul 12)
- Re: what should I do when.... Adriel Desautels (Jul 12)
- Re: what should I do when.... Adriel Desautels (Jul 12)
- Message not available
- Re: what should I do when.... Adriel Desautels (Jul 12)
- RE: what should I do when.... Nick Vaernhoej (Jul 11)
- RE: what should I do when.... Sergio Castro (Jul 11)
- Re: what should I do when.... Adriel Desautels (Jul 11)
- Message not available
- Message not available
- Fwd: what should I do when.... Eric Starace (Jul 11)
- Re: Fwd: what should I do when.... Adriel Desautels (Jul 12)
- Re: what should I do when.... ॐ aditya mukadam ॐ (Jul 11)
- Re: what should I do when.... Adriel Desautels (Jul 11)
- Message not available
- Message not available
- Re: what should I do when.... Ansgar -59cobalt- Wiechers (Jul 15)
- Re: what should I do when.... Adriel Desautels (Jul 15)
- Re: what should I do when.... Ansgar -59cobalt- Wiechers (Jul 15)
- Re: what should I do when.... Dan Anderson (Jul 15)