[120868] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: I don't need no stinking firewall!

daemon@ATHENA.MIT.EDU (Tony Finch)
Tue Jan 5 16:13:40 2010

Date: Tue, 5 Jan 2010 21:08:28 +0000
From: Tony Finch <dot@dotat.at>
To: Peter Hicks <peter.hicks@poggs.co.uk>
In-Reply-To: <4B43A8A7.9030904@poggs.co.uk>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

On Tue, 5 Jan 2010, Peter Hicks wrote:
>
> Is that really stateful inspection?  Isn't the SMTP fixup on a PIX an
> application-level gateway?

Well, the bug I described is caused by it not being stateful enough.

> I *though* most of the world turns SMTP fixup off because it's naff.

Exactly my point :-)

Tony.
-- 
f.anthony.n.finch  <dot@dotat.at>  http://dotat.at/
GERMAN BIGHT HUMBER: SOUTHWEST 5 TO 7. MODERATE OR ROUGH. SQUALLY SHOWERS.
MODERATE OR GOOD.


home help back first fref pref prev next nref lref last post