On Mon, 2 Feb 2004, M. Dodge Mumford wrote:
> While the IRC traffic you mention may or may not be increasing[1], the
> underlying problem you identify is not new. Firewall administration has
> become so simple that many refuse to think about it. It's just the bad evil
> people on the outside that holds administrator's attention.. Little
> contingency is made for what happens when[2] someone gets in.
Avi did an interesting presentation based on his work at Lumeta on a
configuration parser, talking about the number of misconfigurations
they'd found in the average Firewall-1 installation.
It certainly speaks to your point that many people aren't actually
doing what they think they are with their firewalls.
cheers!
==========================================================================
"A cat spends her life conflicted between a deep, passionate and profound
desire for fish and an equally deep, passionate and profound desire to
avoid getting wet. This is the defining metaphor of my life right now."
_______________________________________________
firewall-wizards mailing list
firewall-wizards_at_honor.icsalabs.com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
Received on Feb 02 2004