Re: Standard & Poors security nightmare

[jmknoble () PINT-STOWP CX (Jim Knoble)]

Circa 2000-May-17 12:44:01 -0700 schrieb Stephen Friedl:

: Standard & Poor's ComStock division sells a MultiCSP system that
: provides realtime stock quotes and news, and [...] These machines are
: an unmitigated *disaster* for security, and it's not often I can use
: "unmitigated" so literally.

  [...]

: 6) Install and use ipchains on *both* interfaces to drastically reduce what
:    this machine can do. [....]

Kernel 2.0.35 is likely to use ipfwadm, which is likely to already be
installed on a Red Hat Linux 5.1 system.  Anyone know of a reason not
to use ipfwadm?

--
jim knoble | jmknoble () jmknoble cx | http://www.jmknoble.cx/