Home page logo

nanog logo nanog mailing list archives

Re: Port blocking last resort in fight against virus
From: Måns Nilsson <mansaxel () sunet se>
Date: Wed, 13 Aug 2003 10:17:27 +0200

--On Wednesday, August 13, 2003 11:00:56 +0300 Petri Helenius
<pete () he iki fi> wrote:

I think filters/firewalls are useful.  I believe every computer should
have one.  

Firewalls are a patch to broken network application architechture. If
your applications would have been properly designed, you would not have
the need for firewalls. They are for perimeter defence only anyway.

The important wording here is "every computer should have one"; indicating
that it is the host that protects itself. This said, I do agree that
properly written operating systems not even need this. One free Unix-clone
I happen to run manages to reach this level of properness; so it is
definitely possible. 

Måns Nilsson            Systems Specialist
+46 70 681 7204         KTHNOC  MN1334-RIPE

We're sysadmins. To us, data is a protocol-overhead.

Attachment: _bin

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]