Re: fail-open firewalls...

[Frederick M Avolio <fred () avolio com>]

At 04:45 PM 6/5/02 -0400, Anton Chuvakin wrote:
> I am curious, how one can _verify_ that the firewall is indeed made this
> way.


A good starting point: Any firewall that requires a final Any/Any/Any/Deny 
rule should be suspect.


Fred
Avolio Consulting, Inc.
16228 Frederick Road, PO Box 609, Lisbon, MD 21765, US
+1 410-309-6910 (voice) +1 410-309-6911 (fax)
http://www.avolio.com/

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards