Barracuda Networks Spam Firewall

Tue May 18 19:48:28 UTC 2004

On Tue, 18 May 2004 Valdis.Kletnieks at vt.edu wrote:

> So your auditor wouldn't mind if you kept an unencrypted list of credit card
> numbers on a DMZ box, because if somebody hacks the box they can gather those
> over time? :)

This is hardly the same thing.  E-mail addresses are public, credit card 
numbers aren't. Email addresses can be gotten by brute-force checking fairly 
easily without even cracking the machine.  card numbers can't.

What would your auditor think about your secondary MX being used as a DOS 
amplifier because it sends out thousands of bogus bounces to forged 
addresses  ?

==========================================================
Chris Candreva  -- chris at westnet.com -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/