[geeks] News server access

[David Cantrell]

On Mon, Aug 13, 2001 at 07:18:00PM -0400, joshua d boyd wrote:
> On Mon, Aug 13, 2001 at 11:52:17AM -0500, Bill Bradford wrote:
> > My unit drops all connections that werent already established by 
> > one of the machines on the inside - you cant even ping/traceroute/portscan
> > it.  Any exploits would have to come from the "inside" LAN.  

How does it deal with evil protocols like ftp and irc?

> Uhm, excuse me, but weren't you earlier saying that it did port
> forwarding?  How does it do that if it drops all incoming connections?

Presumably those are specially configured exceptions to the general 'drop
everything' rule.

-- 
David Cantrell | david at cantrell.org.uk | http://www.cantrell.org.uk/david

Do not be afraid of cooking, as your ingredients will know and misbehave
   -- Fergus Henderson