Re: Firewall Failure Modes

[Thomas . Clark @ Eng . Sun . COM (Tom Clark)]

Hi,

I agree with your paragraph and would suggest that it is applicable
to a good many software packages that have nothing to do with
firewalls.  It is almost a truism.

This should be changed!  For firewalls, however, something like a
benchmark would be nice, but it again would not be a boundary
checker.

It seems as though boundaries are inherently Vendor- and
designer-unique regardless of the application.

What is the next step?

-Tom