Re: firewall holes for particular machines

[Zach Jansen <zjanse20 () CALVIN EDU>]

Wouldn't it be better to run these applications through a proxy, such as squid, instead?

Zach Jansen
-- 

Zach Jansen
Information Security Officer
Calvin College
Phone: 616.526.6776
Fax: 616.526.8550

> > > On 5/13/2009 at 1:24 PM, in message <200905131224.13916.carn0048 () umn edu>,
Megan Carney <carn0048 () UMN EDU> wrote:
> I echo all the concerns already mentioned, but there are cases where your 
> hands are tied.  Windows updates as well as some other software are 
> akamaized, 
> meaning IP-based restrictions aren't possible without opening a very wide 
> hole.
>
> In those cases, DNS seems to be the better choice.