RE: Passive mode ftp

[Vincent de Lau <Vincent.de.Lau@tridion.com>]

    [ Part 1, Text/PLAIN (charset: ISO-8859-1 "Latin 1")  28 lines. ]
    [ Unable to print this part. ]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]


-----Original Message-----
From: Mikael Olsson [mailto:mikael.olsson@enternet.se]
Sent: dinsdag 15 augustus 2000 15:14
To: Graham Wheeler
Cc: Andrew Lawrence; Firewalls (E-mail)
Subject: Re: Passive mode ftp

> Considering that inside users (processes, if you like) can always
> connect out through some means or another, I'd rather have my
> firewall concentrate on keeping external Bad Guys out, rather than
> attempting to concentrate on the futile task of keeping internal Bad
> Guys inside.
>
> ... but that's just my point of view, I guess ;)

I agree with you. The only way to keep Bad Guys in, is to have one rule
in the firewall: Deny All

It is better to keep Bad Guys out with the firewall, attachment blocking
in e-mail, virusscanning the e-mail and the desktop and train the users.

That makes $.04

Vincent de Lau
 System Administrator / MSCE

 Tridion (http://www.tridion.com)
 mailto:Vincent.de.Lau@tridion.com