Security Basics mailing list archives

RE: what should I do when....


From: "Nick Vaernhoej" <nick.vaernhoej () capitalcardservices com>
Date: Thu, 10 Jul 2008 10:27:38 -0500

Adriel, what if the OP isn't hosting any publicly accessible services?

Ansgar, I know the email disclaimer is hogwash, but the company requires
it so I can't do much about it.

Nick Vaernhoej
"Quidquid latine dictum sit, altum sonatur."


-  -----Original Message-----
-  From: Adriel Desautels
-  Sent: Wednesday, July 09, 2008 10:00 AM
-
-  Ansgar,
-       You can not bullet proof a computer system by using a firewall
-  even if
-  you block all traffic to and from that system. In most configurations
-  firewalls block inbound connection attempts to *internal* systems,
-  while
-  they permit outbound attempts from those systems.
-
-       It is my opinion that firewalls are not security devices as much
-  as
-  they are traffic shaping devices. Their job is to control network
-  connections and the flow of traffic, not to ensure that something
-  can't
-  be hacked.
-
-  ---------------------------------------------------------------
-  Netragard, LLC - http://www.netragard.com  -  "We make IT Safe"
-  Penetration Testing, Vulnerability Assessments, Website Security
-
-  Netragard Whitepaper Downloads:
-  -------------------------------
-  Choosing the right provider : http://tinyurl.com/2ahk3j
-  Three Things you must know  : http://tinyurl.com/26pjsn
-
-
-  Ansgar -59cobalt- Wiechers wrote:
-  > On 2008-07-08 Weir, Jason wrote:
-  >> Quote of the day....
-  >>
-  >> "Bullet-proofing your systems is as easy as using a firewall"
-  >>
-  >> If it was only true....
-  >
-  > It is quite true, you're just underestimating the task of
-  maintaining a
-  > firewall.
-  >
-  > Regards
-  > Ansgar Wiechers

This electronic transmission is intended for the addressee (s) named above. It contains information that is privileged, 
confidential, or otherwise protected from use and disclosure. If you are not the intended recipient you are hereby 
notified that any review, disclosure, copy, or dissemination of this transmission or the taking of any action in 
reliance on its contents, or other use is strictly prohibited. If you have received this transmission in error, please 
notify the sender that this message was received in error and then delete this message.
Thank you.


Current thread: