Re: A fun smackdown...

[Devdas Bhagat <devdas () dvb homelinux org>]

On 19/05/05 09:04 -0400, Paul D. Robertson wrote:
> On Tue, 17 May 2005, Martin wrote:
>
> > "Be liberal in what you accept; be strict in what you send."
>
> _All_ effective security controls break that tenet.  The more liberal your
> controls, the more risk you assume.

Unless your control is a proxy, which must accept all kinds of crap, and
send only a stricly validated subset to the client.

The default application of the RFC791 quote is to outbound traffic from your
network, but nothing says that it cannot be applied the other way round.

In general, I agree with you though.

Devdas Bhagat
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards