Re: [Full-Disclosure] Firewall solution for Windows 2003 Server

[Ondrej Krajicek <krajicek@xxxxxxxxxxx>]

On Sat, Apr 24, 2004 at 09:48:01PM +0100, Lee wrote:
> Are you suggesting that the win2003 server will be the point of contact for
> the Internet? is this a wise choice or just a product of your setup?

It is not, as you might have noticed, I work for a university. The servers
I have on my mind are completely inaccessible from outside our
'private' network. I need another measure of protection to eliminate
access to services which could not be disabled (ports: 135, 147, 139
and 445) and to have some reliable logging facility. We have
another boxes to do the firewall/router work and they really do not
run Windows... :).

I do not plan to use Windows servers to do firewall, routing/nat work,
it seems to me as a really silly idea ;).

> I dont like application layer firewalls, they fill me with dread, yes the
> displays are nice , but that doesnt mean it cant be acheived elsewhere.

So do I.

Best Regards,

Ondra

+>>>-----------------------------------------------------------------+
|Ondrej Krajicek                                                 (-KO|
|Institute of Computer Science, Masaryk University Brno, CR          |
|http://isildur.ics.muni.cz/~ondra               krajicek@xxxxxxxxxxx|
+--------------------------------------------------------------------+

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html