[170204] in North American Network Operators' Group
Re: misunderstanding scale
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Mon Mar 24 23:14:35 2014
To: "Naslund, Steve" <SNaslund@medline.com>
In-Reply-To: Your message of "Tue, 25 Mar 2014 02:47:31 -0000."
<9578293AE169674F9A048B2BC9A081B4B5422604@MUNPRDMBXA1.medline.com>
From: Valdis.Kletnieks@vt.edu
Date: Mon, 24 Mar 2014 23:13:00 -0400
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--==_Exmh_1395717180_2254P
Content-Type: text/plain; charset=us-ascii
On Tue, 25 Mar 2014 02:47:31 -0000, "Naslund, Steve" said:
> Lots and lots of enterprises count on a hard perimeter and almost nothing
> behind it so once I am in behind your NAT, you are unlikely to notice it until
> something real bad happens. That is the state of most enterprise network
> security today.
"All of ARPA's protection has, by design, left the internal AT&T machines
untested--a sort of crunchy shell around a soft, chewy center. We run security
scans..."
ches Fri Apr 20 07:46:11 EDT 1990
http://www.cheswick.com/ches/papers/gateway.pdf
For the Beloit College class of 2014, the Internet has always had a soft
chewy center....
--==_Exmh_1395717180_2254P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Exmh version 2.5 07/13/2001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=h+1b
-----END PGP SIGNATURE-----
--==_Exmh_1395717180_2254P--