nanog mailing list archives

Re: M$SQL cleanup incentives


From: Valdis.Kletnieks () vt edu
Date: Thu, 20 Feb 2003 16:34:58 -0500

On Thu, 20 Feb 2003 22:11:06 +0100, Iljitsch van Beijnum said:

Seems to me that filtering is no longer necessary unless you have reason
to believe your customers are going to install new vulnerable boxes or
vulnerable software on existing boxes AND their pipe to you is so big

"new vulnerable boxes" has to be assumed as the default state for any new
installs, until such time as the vulnerability is patched in the base install,
and has been out for so long that installing the unpatched version will
inspire "ewww that's old" comments...

Attachment: _bin
Description:


Current thread: