Re: Comparisons of Firewall-1 vs. PIX

["H. Morrow Long" <morrow.long () yale edu>]

Note that source ports should never be trusted -- particularly those
source ports in packets from the 'outside' insecure network.  

And the fact that a source port is below 1024 (or above, or is any
particular port number such as that used by a well known app) should not
convey any special cachet when the packet comes from a host on a
network outside your site and control.

- H. Morrow Long