Re: Correction: XP SP2 ports open to local subnet

[John Kristoff <jtk () NORTHWESTERN EDU>]

I agree with some who are concerned that not filtering packets from the
local subnet is potentially going to be a problem.  In my experience,
where I've put similiar filters on router interfaces at subnet edges,
hosts within the unfiltered subnet(s) would eventually get compromised
by a host that came into the shielded network with something bad.

I haven't played with XP SP2 so someone please fill me in on the
details.

If a XP SP2 host becomes compromised, will the default firewall config
also block packets on egress from the compromised host to hosts not on
the local subnet or are the filters only applied on ingress to itself?

John

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.