Re: FW-1 technical strength

[Kevin Steves <stevesk () sweden hp com>]

On Sun, 27 Dec 1998, Darren Reed wrote:
: In some email I received from Ryan Russell, sie wrote:
: > Ok, so what's wrong with it?
: 
: In some ways you could compare the default FW-1 settings with those for
: SunOS4 and /etc/hosts.equiv.  It's the first thing that "anyone in the
: know" changes, but there's more units sold than "people in the know".
: Everyone knows they're insecure but the vendor still ships it that way
: to everyone's disbelief.

To put it another way:

FW-1 is not preconfigured "default deny" as Checkpoint claims. This is a
defect.