[70532] in North American Network Operators' Group
Re: Barracuda Networks Spam Firewall
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Tue May 18 15:38:00 2004
To: Steve Drees <drees@rangebroadband.com>
Cc: "Christopher X. Candreva" <chris@westnet.com>, nanog@merit.edu
In-Reply-To: Your message of "Tue, 18 May 2004 14:31:21 CDT."
<CMEOKPEELBMNCICEIKEOOEMFGOAA.drees@rangebroadband.com>
From: Valdis.Kletnieks@vt.edu
Date: Tue, 18 May 2004 15:37:24 -0400
Errors-To: owner-nanog-outgoing@merit.edu
--==_Exmh_968251366P
Content-Type: text/plain; charset=us-ascii
On Tue, 18 May 2004 14:31:21 CDT, Steve Drees said:
> if I 0wn your mail gateway I can generate a list of valid accounts over
> time. On a busy host over a short period of time.
So your auditor wouldn't mind if you kept an unencrypted list of credit card
numbers on a DMZ box, because if somebody hacks the box they can gather those
over time? :)
--==_Exmh_968251366P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iD8DBQFAqmXzcC3lWbTT17ARAojyAJoC/MB9zvgpy5jsgFGL9uWSgKOQLgCeOvVU
YtJVx8niqgxj3g4RYvfLbUE=
=a5ou
-----END PGP SIGNATURE-----
--==_Exmh_968251366P--