RE: tcpdump on my firewall

Seems like you don't have to try to hard to make a common sense argument
against it. Seems to make a readily useful tool for anybody that might gain
access to your firewall, since much of your traffic will likely pass through
your firewall - and goes against minimizing your firewall system, might ask
him if there's anything else on he wants on there, like a quake server.
Seems that a better place would be inside your firewall.

Message: 1
Date: Thu, 25 Oct 2001 14:51:36 -0400 (EDT)
From: <hesselsp_at_ashaman.dhs.org>
To: firewall-wizards_at_nfr.com
Subject: [fw-wiz] tcpdump on my firewall

Anyone want to help me out here?

I have had a request to put tcpdump on our firewall by one of our tech
guys.

I have told him that I will not do so, and he wants a good reason why.

Does anyone have a ezine article or some other reference as to why I
shouldn't put it on?

--
--
Paul
--__--__--
_______________________________________________
firewall-wizards mailing list
firewall-wizards_at_nfr.com
http://list.nfr.com/mailman/listinfo/firewall-wizards
End of firewall-wizards Digest
_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com
_______________________________________________
firewall-wizards mailing list
firewall-wizards_at_nfr.com
http://list.nfr.com/mailman/listinfo/firewall-wizards