Re: Protecting publicly reacheable servers (e.g. HTTP)?

[Frederick M Avolio <fred () avolio com>]

At 02:28 PM 11/22/01 +0100, Patrick M. Hausen wrote:
> My reasoning has always been that - given the state of
> firewall products today - a static packet filter that
> blocks all but port 80 would be the most appropriate
> solution to offer some sort of protection to the server
> machine.

I agree, plus disable all services running on the webserver except for httpd.

Fred

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards