Great Circle Associates Firewalls
(October 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: RE: NT Firewall
From: Tony Li <tli @ cisco . com>
Date: Sat, 28 Oct 1995 15:38:46 -0700
To: markly @ ci . riverside . ca . us (Markly Dykeman)
Cc: firewalls @ GreatCircle . COM

   The problem that I have with NT is that I CANNOT have the source code. 
   So who knows what is in the kernal? Do you know? I chose BSDI
   because I was able to PURCHASE ALL SOURCE CODE and see for my
   self what is going on under the covers. Not that I am an expert, but when I
   choose to build it myself.....I dont want any "black boxs" involved.  When I
   compile my kernal, I know what I am allowing and disallowing. I am able to
   strip running processes down to just what is necessary, delete any
   unwanted programs, and "harden" the programs where I felt necessary by
   recompiling with my own patches......Can you do this with NT?....btw...I
   consider my "feature laden" Ciscos the most trustworthy part of the DMZ
   puzzle.... Am I wrong?

No, just inconsistent.  You do not have source code to the cisco
router.  Yet you trust it.  [Don't let me discourage this. ;-)]

If you want to distrust NT because you're an anti-Bill bigot, have had
seriously bad experiences with NT, can't stand maintaining the
hardware, or just love Unix, that's all well and good.  But the least
you can do is to be honest with yourself about it...

Tony


Follow-Ups:
Indexed By Date Previous: Clarification : Limiting a Web Browser - Reverse firewall !
From: lwwagner @ bright . net
Next: Re: NT Firewall
From: Tony Li <tli @ cisco . com>
Indexed By Thread Previous: RE: NT Firewall
From: Markly Dykeman <markly @ ci . riverside . ca . us>
Next: Re: RE: NT Firewall
From: Kari Laine <buster @ klaine . pp . fi>

Google
 
Search Internet Search www.greatcircle.com