[arin-announce] IPv4 Address Space (fwd)

Adam Selene nospam at vguild.com
Wed Oct 29 00:28:55 UTC 2003


>>and operating system would be safer sitting behind a "firewall"
>>pretty much marked the end of universal end-to-end connectivity,
>>and I don't see it

An OS-level (software) firewall doesn't preclude end-to-end connectivity,
and even a per-machine hardware firewall doesn't given it can pass inbound
traffic through. Most servers on the Internet are also behind hardware
firewalls, and they don't hinder end-to-end connectivity.

> Last I checked most "firewall"s don´t make these machines safe, it
> might make them safer, so only two out of three malwares hit them.

A probably configured firewall will protect a machine against everything but
it's user, and therein lies a problem you will likely never solve.

    Adam




More information about the NANOG mailing list