Great Circle Associates Firewalls
(July 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Access to TCP Port 113
From: Al McPhee <mcphee @ nucleus . com>
Date: Wed, 12 Jul 1995 22:43:29 -0600 (MDT)
To: Julian Assange <proff @ suburbia . apana . org . au>
Cc: Paul Ferguson <paul @ hawksbill . sprintmrn . com>, firewalls @ GreatCircle . COM
In-reply-to: <199507130328 . NAA26184 @ suburbia . net>


On Thu, 13 Jul 1995, Julian Assange wrote:

> > Blocking _shouldn't_ wreak too much havoc, but you may notice that
> > establishing connections to outside services may seem to hang during
> > the connection process while the tcp/113 request times out.
> > 
> > My vote: Block it.
> > 
> 
> Yes, after all US sprint has to protect the usernames/uids of all the hackers
> come out from their internal network.
> 
> Typical small minded isolationist stance.
> 
> -Proff
> 
 Small minded isolationist stance? Does firewall architecture somehow 
insinuate an open policy? Of course it's isolationist. Protecting 
uid/usernames from a subnet is good policy. It dissalows (or trys to) 
hackers on the *outside* from getting information about the inside.

 Mcphee


Follow-Ups:
References:
Indexed By Date Previous: Re: Access to TCP Port 113
From: "Daniel O'Callaghan" <danny @ www . unimelb . EDU . AU>
Next: Re: Access to TCP Port 113
From: Brent @ GreatCircle . COM (Brent Chapman)
Indexed By Thread Previous: Re: Access to TCP Port 113
From: Julian Assange <proff @ suburbia . apana . org . au>
Next: Re: Access to TCP Port 113
From: Julian Assange <proff @ suburbia . apana . org . au>

Google
 
Search Internet Search www.greatcircle.com