Firewall Wizards mailing list archives
Re: Worms, Air Gaps and Responsibility
From: Rogan Dawes <discard () dawes za net>
Date: Fri, 07 May 2004 17:24:21 +0200
Chris Pugrud wrote:
I've been doing a lot of research over the last several months about how to isolate desktop and laptop systems from servers using switches and the firewall filtering capabilities of VLAN routers (layer 3 switches). I'm working that research into publishable form, but I can answer more specifically to what you are suggesting and hopefully get some feedback from the community at the same time.
This is much easier to manage and deploy than other methods that suggest placing every system in it's own subnet and VLAN.
I was thinking more along the lines of the bridging firewalls pioneered(?) by the likes of the Lucent Brick, and now readily available in Linux, OpenBSD, etc.
So devices still reside on the same sub-network, but they just can't talk to each other. This does allow for more granularity than simply saying that "public -> private" and "private -> public" is OK.
I wonder what happened to the line of switches that had CheckPoint FW-1 embedded in them . . . ;-) Ahead of their time, perhaps? (circa 1998)
Regards, Rogan -- Rogan Dawes *ALL* messages to discard () dawes za net will be dropped, and added to my blacklist. Please respond to "lists AT dawes DOT za DOT net" _______________________________________________ firewall-wizards mailing list firewall-wizards () honor icsalabs com http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
Current thread:
- Worms, Air Gaps and Responsibility Paul D. Robertson (May 05)
- RE: Worms, Air Gaps and Responsibility Karl Mueller (May 05)
- RE: Worms, Air Gaps and Responsibility R. DuFresne (May 05)
- RE: Worms, Air Gaps and Responsibility Ben Nagy (May 05)
- Re: Worms, Air Gaps and Responsibility Devdas Bhagat (May 05)
- Re: Worms, Air Gaps and Responsibility Marcus J. Ranum (May 05)
- Re: Worms, Air Gaps and Responsibility Einar Indridason (May 06)
- Re: Worms, Air Gaps and Responsibility Rogan Dawes (May 05)
- Re: Worms, Air Gaps and Responsibility Mason (May 06)
- Re: Worms, Air Gaps and Responsibility Chris Pugrud (May 07)
- Re: Worms, Air Gaps and Responsibility Rogan Dawes (May 07)
- Re: Worms, Air Gaps and Responsibility Mordechai T. Abzug (May 06)
- Re: Worms, Air Gaps and Responsibility Jim Seymour (May 06)
- Re: Worms, Air Gaps and Responsibility Marcus J. Ranum (May 06)
- Re: Worms, Air Gaps and Responsibility Carson Gaspar (May 07)
- <Possible follow-ups>
- RE: Worms, Air Gaps and Responsibility Paul D. Robertson (May 05)
- RE: Worms, Air Gaps and Responsibility Carson Gaspar (May 05)
- RE: Worms, Air Gaps and Responsibility Paul D. Robertson (May 05)
- RE: Worms, Air Gaps and Responsibility Carson Gaspar (May 06)
- RE: Worms, Air Gaps and Responsibility Paul D. Robertson (May 06)
- Re: Worms, Air Gaps and Responsibility Devdas Bhagat (May 06)
- RE: Worms, Air Gaps and Responsibility Carson Gaspar (May 05)
- RE: Worms, Air Gaps and Responsibility Karl Mueller (May 05)