[121091] in North American Network Operators' Group
Re: I don't need no stinking firewall!
daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Sun Jan 10 01:41:55 2010
From: "Dobbins, Roland" <rdobbins@arbor.net>
To: NANOG list <nanog@nanog.org>
Date: Sun, 10 Jan 2010 06:32:18 +0000
In-Reply-To: <836bf1f91001092222k304f2ba0o288cf0cf5b83cf6b@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Jan 10, 2010, at 1:22 PM, harbor235 wrote:
> Again, a firewall has it's place just like any other device in the networ=
k, defense in >>> depth is a prudent philosophy to reduce the chances of co=
mpromise, it does not >>>eliminate it nor does any architecture you can thi=
nk of, period
What a ridiculous statement - of course it does.
*The place of the stateful firewall is in front of clients, not servers*. =
=20
I'm not going to continue the unequal contest of pitting real-world operati=
onal experience against Confused Information Systems Security Professional =
brainwashing. One can spout all the buzzwords and catchphrases one wishes,=
but at the end of the day, it's all dead wrong - and anyone naive enough t=
o fall for it is setting himself up for a world of hurt.
-----------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>
Injustice is relatively easy to bear; what stings is justice.
-- H.L. Mencken
