Re: Benefit of firewall over NAT-only 'protected' network

[salgak () speakeasy net]

> -----Original Message-----
> From: ark () eltex net [mailto:ark () eltex net]
> Sent: Wednesday, May 28, 2003 12:43 PM
> To: 'Paul Robertson'
> Cc: 'Hugh Blandford', firewall-wizards () honor icsalabs com
> Subject: Re: [fw-wiz] Benefit of firewall over NAT-only 'protected' network
>
> If they really do not use it, you are completely right, any unused
> port should be blocked (if we use packet filtering firewalls. i run
> irc from the office but i use proxy ;-)

Actually, my approach to firewalling is lock EVERYTHING down, then selectively open ports as needed.  That way, if 
somebody tries something on a "novel" port, you're protected. . .


_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards