Re: mitigating the lack of a firewall

["Marcus J. Ranum" <mjr () nfr net>]

Ryan Russell wrote:
> What do you mean "site"?
>
> If you're talking about a bunch of machines, certainly not.  Not without
> making the NT machine something that constitutes a firewall.

This is an important point I think is worth emphasizing. If every
machine on your DMZ _is_ as strong as a firewall, you don't need
a firewall. Firewalls only make sense when you have mixtures of
machines that have weak security with networks that have bad guys
on them. ;)

mjr.