[arin-announce] IPv4 Address Space (fwd)
Adam Selene
nospam at vguild.com
Wed Oct 29 00:28:55 UTC 2003
>>and operating system would be safer sitting behind a "firewall"
>>pretty much marked the end of universal end-to-end connectivity,
>>and I don't see it
An OS-level (software) firewall doesn't preclude end-to-end connectivity,
and even a per-machine hardware firewall doesn't given it can pass inbound
traffic through. Most servers on the Internet are also behind hardware
firewalls, and they don't hinder end-to-end connectivity.
> Last I checked most "firewall"s don´t make these machines safe, it
> might make them safer, so only two out of three malwares hit them.
A probably configured firewall will protect a machine against everything but
it's user, and therein lies a problem you will likely never solve.
Adam
More information about the NANOG
mailing list