Full Disclosure mailing list archives

Re: Zone Alarm


From: Shawn McMahon <smcmahon () eiv com>
Date: Wed, 4 Jun 2003 16:20:19 -0400

On Wed, Jun 04, 2003 at 09:23:00PM +0200, Sven Hoexter said:

As always a "firewall" is the whole construct with portfilters and
users who know on wich "Install this cool Dialer button" they should
klick and on which not. Ah and a system wich receives regular vendor
patches is a part of the whole, too.

Although "fails open" is a pretty powerful argument against software
firewalls, it's probably easier to get a user to download and install a
new copy of Zone Alarm (especially if it has some kind of auto-update
feature, which I dunno since I don't use it), than it is to get them to
download a new firmware image for their hardware router and flash it.


-- 
Shawn McMahon     | Let every nation know, whether it wishes us well or ill,
EIV Consulting    | that we shall pay any price, bear any burden, meet any
UNIX and Linux    | hardship, support any friend, oppose any foe, to assure
http://www.eiv.com| the survival and the success of liberty. - JFK

Attachment: _bin
Description:


Current thread: