[120868] in North American Network Operators' Group
Re: I don't need no stinking firewall!
daemon@ATHENA.MIT.EDU (Tony Finch)
Tue Jan 5 16:13:40 2010
Date: Tue, 5 Jan 2010 21:08:28 +0000
From: Tony Finch <dot@dotat.at>
To: Peter Hicks <peter.hicks@poggs.co.uk>
In-Reply-To: <4B43A8A7.9030904@poggs.co.uk>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Tue, 5 Jan 2010, Peter Hicks wrote:
>
> Is that really stateful inspection? Isn't the SMTP fixup on a PIX an
> application-level gateway?
Well, the bug I described is caused by it not being stateful enough.
> I *though* most of the world turns SMTP fixup off because it's naff.
Exactly my point :-)
Tony.
--
f.anthony.n.finch <dot@dotat.at> http://dotat.at/
GERMAN BIGHT HUMBER: SOUTHWEST 5 TO 7. MODERATE OR ROUGH. SQUALLY SHOWERS.
MODERATE OR GOOD.