Re: SANS Top Ten and Commercial Firewalls

["Paul D. Robertson" <proberts () patriot net>]

On Fri, 4 Oct 2002 ark () eltex ru wrote:

> There are some "reasonable" length limitations, like limiting maximal
> http header size. 

Oh, I totally agree with this, however it breaks the spec to enforce 
them, and since I've been railing against the spec itself, examples of 
exploits that were disallowed by the spec would have quieted me down a 
bit.

Thanks,

Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
proberts () patriot net      which may have no basis whatsoever in fact."
probertson () trusecure com Director of Risk Assessment TruSecure Corporation

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards