Re: VPNmadness gets more support;

[ArkanoiD <ark () eltex net>]

I treat VPN as dialup users: uncontrolled external enviroment, though
somehow authenticated. So one should terminate connections on device plugged
into separate segment (small companies may use firewall itself for it) and
enforce some additional restrictions to ensure it does no harm.

Using VPN to create uncontrolled all-to-all netowrk is just insane, i hope
everyone understands that.

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards