Re: SANS Top Ten and Commercial Firewalls

["Paul D. Robertson" <proberts () patriot net>]

On Fri, 4 Oct 2002 ark () eltex ru wrote:

> Sometimes. It is often prevented _before_ vulnerability is known if 
> the exploit breaks http protocol, otherwise you can block it with regexp.

Every time I've looked at the protocol spec, it's been a sieve- there 
aren't length definitions in most of the specification.  Could you provide 
some examples of things which break the protocol please?

Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
proberts () patriot net      which may have no basis whatsoever in fact."
probertson () trusecure com Director of Risk Assessment TruSecure Corporation

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards