M$SQL cleanup incentives

Valdis.Kletnieks at vt.edu Valdis.Kletnieks at vt.edu
Thu Feb 20 21:34:58 UTC 2003


On Thu, 20 Feb 2003 22:11:06 +0100, Iljitsch van Beijnum said:

> Seems to me that filtering is no longer necessary unless you have reason
> to believe your customers are going to install new vulnerable boxes or
> vulnerable software on existing boxes AND their pipe to you is so big

"new vulnerable boxes" has to be assumed as the default state for any new
installs, until such time as the vulnerability is patched in the base install,
and has been out for so long that installing the unpatched version will
inspire "ewww that's old" comments...
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20030220/622ce60d/attachment.sig>


More information about the NANOG mailing list