[64598] in North American Network Operators' Group
Re: [arin-announce] IPv4 Address Space (fwd)
daemon@ATHENA.MIT.EDU (Adam Selene)
Tue Oct 28 19:25:27 2003
From: "Adam Selene" <nospam@vguild.com>
To: "'nanog list'" <nanog@merit.edu>
Date: Tue, 28 Oct 2003 18:28:55 -0600
Errors-To: owner-nanog-outgoing@merit.edu
>>and operating system would be safer sitting behind a "firewall"
>>pretty much marked the end of universal end-to-end connectivity,
>>and I don't see it
An OS-level (software) firewall doesn't preclude end-to-end connectivity,
and even a per-machine hardware firewall doesn't given it can pass inbound
traffic through. Most servers on the Internet are also behind hardware
firewalls, and they don't hinder end-to-end connectivity.
> Last I checked most "firewall"s donīt make these machines safe, it
> might make them safer, so only two out of three malwares hit them.
A probably configured firewall will protect a machine against everything but
it's user, and therein lies a problem you will likely never solve.
Adam
