[113219] in North American Network Operators' Group
Re: ACLs vs. full firewalls
daemon@ATHENA.MIT.EDU (ubaidali_abdul_razack@3com.com)
Tue Apr 7 22:17:26 2009
In-Reply-To: <96516A7A-7051-43C3-ADF8-F28E254041B5@cisco.com>
To: NANOG list <nanog@nanog.org>
From: ubaidali_abdul_razack@3com.com
Date: Wed, 8 Apr 2009 10:14:38 +0800
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org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