From owner-freebsd-current Mon Aug 16 21: 1:38 1999 Delivered-To: freebsd-current@freebsd.org Received: from cain.gsoft.com.au (genesi.lnk.telstra.net [139.130.136.161]) by hub.freebsd.org (Postfix) with ESMTP id 4733414E10 for ; Mon, 16 Aug 1999 21:01:11 -0700 (PDT) (envelope-from doconnor@gsoft.com.au) Received: from cain.gsoft.com.au (doconnor@cain [203.38.152.97]) by cain.gsoft.com.au (8.8.8/8.8.8) with ESMTP id NAA00692; Tue, 17 Aug 1999 13:31:18 +0930 (CST) (envelope-from doconnor@gsoft.com.au) Message-ID: X-Mailer: XFMail 1.3 [p0] on FreeBSD X-Priority: 3 (Normal) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="_=XFMail.1.3.p0.FreeBSD:990817133118:5835=_"; micalg=pgp-md5; protocol="application/pgp-signature" In-Reply-To: <199908170356.UAA10363@gndrsh.dnsmgr.net> Date: Tue, 17 Aug 1999 13:31:18 +0930 (CST) From: "Daniel O'Connor" To: "Rodney W. Grimes" Subject: Re: Dropping connections without RST Cc: current@FreeBSD.ORG Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG This message is in MIME format --_=XFMail.1.3.p0.FreeBSD:990817133118:5835=_ Content-Type: text/plain; charset=us-ascii On 17-Aug-99 Rodney W. Grimes wrote: > Would I use it in place of ipfw for what the original person asked > about, no way, not in a million years. If I want a box secure it > is going to have ipfw or ipfilter rules down to the last detail. > Why, well, it would prevent some junior admin from defeating policy > by starting up something we don't want anyone to connect to on that > box, like ftpd... > > IMHO, this know would give some folks a false since of security, > but not so much that I would argue about keeping it out. Well, I'm all in favour for allowing people to shoot themselves in the foot :) IMHO its OK if there is a warning about it. --- Daniel O'Connor software and network engineer for Genesis Software - http://www.gsoft.com.au "The nice thing about standards is that there are so many of them to choose from." -- Andrew Tanenbaum --_=XFMail.1.3.p0.FreeBSD:990817133118:5835=_ Content-Type: application/pgp-signature -----BEGIN PGP MESSAGE----- Version: 2.6.3ia iQCVAwUBN7jejlbYW/HEoF9pAQFyBgP+IrPrL1kIyNNtBDZDPJwrJdw+Dc1IL3G/ FKnq1pY3T6jbLkw3uCT90jYmZbO4Ih0FBQCcqpFUXoq2nGnR0JcVBjfSDDfGCcpz DOTRKvCvf0zX3cwncp+Bn+F3VghpOEggBxZmTqKx+HlCR1InNMBE6ubF7kqg33WD GPU6odFMXwk= =L0LB -----END PGP MESSAGE----- --_=XFMail.1.3.p0.FreeBSD:990817133118:5835=_-- End of MIME message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message