nanog mailing list archives
Re: Firewall opinions wanted please
From: "Steven M. Bellovin" <smb () research att com>
Date: Tue, 16 Mar 2004 22:33:02 -0500
In message <200403170238.i2H2caAA006011 () turing-police cc vt edu>, Valdis.Kletni eks () vt edu writes:
--==_Exmh_2134986584P Content-Type: text/plain; charset=us-ascii On Tue, 16 Mar 2004 14:27:16 PST, Nicole <nmh () daemontech com> said:From what I have heard a proxy firewall would be best?I'll go out on a limb here and say that the actual make and model of the firewall don't matter anywhere *near* as much as a proper understanding on the client's part of what a firewall can and can't do.
You're not going out on a limb; you're absolutely right, and I've been saying that for years. I'll quote myself: Although firewalls are a useful part of a network security program, they are not a panacea. When managed properly, they are useful, but they will not do everything. If firewalls are used improperly, the only thing they buy you is a false sense of security. Beyond that, different security policies have a much greater impact than different brands or types of firewalls. --Steve Bellovin, http://www.research.att.com/~smb
Current thread:
- Firewall opinions wanted please Nicole (Mar 16)
- RE: Firewall opinions wanted please - clarification Nicole (Mar 16)
- Re: [NANOG-LIST] RE: Firewall opinions wanted please - clarification Brent Van Dussen (Mar 16)
- Re: Firewall opinions wanted please - clarification Brandon Shiers (Mar 16)
- Re: Firewall opinions wanted please - clarification Alexei Roudnev (Mar 16)
- Re: Firewall opinions wanted please - clarification Richard Cox (Mar 16)
- Re: Firewall opinions wanted please Valdis . Kletnieks (Mar 16)
- Re: Firewall opinions wanted please Steven M. Bellovin (Mar 16)
- Re: Firewall opinions wanted please Rachael Treu (Mar 17)
- <Possible follow-ups>
- Re: Firewall opinions wanted please Gregory Taylor (Mar 16)
- Re: Firewall opinions wanted please Rachael Treu (Mar 17)
- Re: Firewall opinions wanted please bill (Mar 17)
- Re: Firewall opinions wanted please Rachael Treu (Mar 17)
- Re: Firewall opinions wanted please Kevin Oberman (Mar 17)
- Re: Firewall opinions wanted please Rachael Treu (Mar 17)
- Re: Firewall opinions wanted please bill (Mar 17)
- Re: Firewall opinions wanted please Alexei Roudnev (Mar 17)
- Re: Firewall opinions wanted please Rachael Treu (Mar 17)
- Re: Firewall opinions wanted please Rachael Treu (Mar 17)
- RE: Firewall opinions wanted please - clarification Nicole (Mar 16)