[83582] in North American Network Operators' Group
Re: Blocking certain terrorism/porn sites and DNS
daemon@ATHENA.MIT.EDU (Florian Weimer)
Thu Aug 18 11:27:39 2005
From: Florian Weimer <fw@deneb.enyo.de>
To: Kevin <kkadow@gmail.com>
Cc: nanog@nanog.org, Brett Carr <brettcarr@ripe.net>,
Abhishek Verma <abhishekv.verma@gmail.com>
Date: Thu, 18 Aug 2005 17:26:46 +0200
In-Reply-To: <dc718edc0508180219635d69b@mail.gmail.com> (kkadow@gmail.com's
message of "Thu, 18 Aug 2005 04:19:28 -0500")
Errors-To: owner-nanog@merit.edu
> Why not just bring back the "evil bit" as a serious proposal?
I've recently discovered a useful application for the evil bit:
sandboxes for mobile code (think Java applets) can use it to instruct
firewalls not to open additional ports just because a client sends a
"PORT" command on a port 21/TCP connection. 8-)
