Re: [Full-Disclosure] MS should point windowsupdate.com to 127.0.0.1

[Michael Renzmann <security@dylanic.de>]

Hi.

Schmehl, Paul L wrote:
> Given that scenario, please apply your scintillating logic to the
> problem of patching this machine to protect it against threats that were
> discovered *after* SP2.

How about setting up a transparent firewall (that is, a Linux bridging 
box with firewall patches applied, so it is able to filter packages that 
travvel through the bridge). Another way would be setting up something 
like hogwash (iirc). This way one could react to every vulnerability by 
setting up correct filters / filter patterns.

Nevertheless I guess I had to live with one minus point, as I currently 
see no way to insert the box without any interruption of service. A 
(very short) interruption will occur, but as long as the machine relies 
on tcp it should handle the short networking outage.

Just my 0.02$

Bye, Mike

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html