RE: nmap fun

[Frank Knobbe <FKnobbe () KnobbeITS com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> -----Original Message-----
> From: Bret Watson [mailto:lists () ticm com]
> Sent: Thursday, October 26, 2000 9:51 AM
>
> [...]
> Yep Marcus was right - by getting transparent proxies we 
> traded a definite 
> level of security and one should always remember that the 
> standard textbook 
> firewall config always includes a screening router (aka 
> packet filter) in 
> front - its there for a reason guys!...
>
> Still it makes on truly uncomfortable trying to defend APs 
> against packet 
> filters when they become transparent to nmap..

uhm... isn't the Gauntlet a hybrid firewall which contains proxy and
stateful packet inspection technology? If so, is there a
misconfiguration in the packet filter section, or are you saying that
the packet filter piece just does not work?

Regards,
Frank

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.1
Comment: PGP or S/MIME encrypted email preferred.

iQA/AwUBOfhXhkRKym0LjhFcEQJ/qQCgnlQbdzVmHHl0ltNnSo7UVNlbnQ0AoJdE
celyWAzNgxaj+80+Sn4gpIWz
=EdRW
-----END PGP SIGNATURE-----

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards