Re: IP Filtering Patch

Bob Miller wrote:
>Didn't we just have a discussion about how the server would benefit
>from not having unrelated gewgaws attached to it?
>
>The OS already provides sophisticated packet filtering capabilities*,
>so what's the advantage in reinventing this?

Defense in depth.  Secure by default.

All sort of buzzphrases that security people like to throw around.


There's still one more aspect of this to add -- configuring which
interface/address to listen on.  Unlike the filtering that's being
added, that can't be forged.

-- 
==============================|"...his hands were doing what they liked to
 Rob Funk <[email protected]> | do best -- replacing men like himself with
 http://www.funknet.net/rfunk | machines." - Kurt Vonnegut, "Player Piano"

------------------------ Yahoo! Groups Sponsor ---------------------~-->
Get 128 Bit SSL Encryption!
http://us.click.yahoo.com/FpY02D/vN2EAA/xGHJAA/rIp0lB/TM
---------------------------------------------------------------------~->

To unsubscribe from this group, send an email to:
[email protected]

 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/