> OK...so it was the last post on THAT thread... ;-)

Almost, almost ;-)
 
> Absolutely. Heaps of 'em. This is what makes it so interesting!

It does, although I find that as time wears on, it just gets more and more
complex. For instance, a new virus is using NTFS streams to hide itself...

> Antivirus is a must, and this is strictly IDS, rather than firewall, but
> your edge device doesn't necessarily have to know about every vulnerability,
> just block the obvious or suspicious ones and give you enough information to
> determine WITH is going on.

Yes, indeed. I have a real problem with the term "firewall" -- it makes
people think that just because they've installed this firewall, that's
it. They're safe, no more action required, nothing. This is obviously not
right, so it would be better if firewalls were renamed "IP Management
Systems" or something like that.

> Cisco 827 can syslog and trap a bunch of stuff...depending on your IOS
> options.

I'm not sure if the firewall and IPsec IOS options are available for the
827 yet, but yes, it does sound like a much better alternative for the
security-conscious business user. (Well, I'd like one too actually...)
 
> As long as it doesn't cost me any more in modem rental and I can shut it
> down if I want to, it could have a capuccino interface, for all I care.
>
> (Now there's an idea!)

That is a truly excellent, lateral idea! Nokia, are you listening? You
can't have a home appliance that doesn't make a decent cuppa of 'spresso,
fer chrissakes...

-- Juha

This message is part of the NZ Broadband mailing list.
see http://unixathome.org/adsl/ for archives, FAQ,
and various documents.
To unsubscribe: send mail to majordomo@unixathome.org
with "unsubscribe adsl" in the body of the message
Received on Thu Sep 7 13:48:47 2000