Great Circle Associates Firewalls
(December 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Firewalls over NT vs. UNIX
From: Craig Brozefsky <cosmo @ ebs . net>
Date: Mon, 9 Dec 1996 04:31:47 -0600 (CST)
To: Douglas Cheline <dcheline @ genuity . net>
Cc: "'Firewalls @ GreatCircle . COM'" <Firewalls @ GreatCircle . COM>
In-reply-to: <c=US%a=_%p=Genuity%l=X-FILES-961201221227Z-10382 @ x-files . genuity . net>

On Sun, 1 Dec 1996, Douglas Cheline wrote:

> The various Firewall vendors that I have spoken to have repeatedly
> stated that, eventhough their product does run over NT, running
> firewalls over UNIX is much more secure.  The reasoning I get is that NT
> has some inherent vulnerabilities that cannot be plugged since the code
> is proprietary and closed.  UNIX on the other hand is standard based and
> open, plus it has been on the market much longer and more efforts have
> been placed in plugging the holes there.

Which I agree with.  

> 
> This sounds nice but not very convincing unless some hard facts are
> revealed.  Can knowledgable members of this forum tell me what those
> 'holes' in NT are?  and is this a valid argument?

Check out the list of changes in the service packs you get, just going 
thru those will tell you soe of the things that were wrong with previous 
versions of NT and shows you what may e wong with the current versions.  
Tho TCP/IP implementation on NT is reported to have some problems, I 
recall one talk about UDP packets causing problems, not just malformed 
ones, but RFC ompliant ones but I'll have ot get back to he list on that 
one.  Plus, considering Microsoft's track ercord with security it's 
really hard for me to trust them on something as complex as an OS.

If I had source code I could get you prolly a dozen exploits in a few 
days 8)

Craig Brozefsky				cosmo @
 ebs .
 net
System Administrator			vox: 312-226-1675
EBS.NET					http://www.ebs.net
*****available for limited time only in this dimension****



References:
Indexed By Date Previous: Re: Oracle SQL/Net
From: pauck @ rs3 . wmd . de (Marco Pauck)
Next: Re: Firewalls over NT vs. UNIX
From: Craig Brozefsky <cosmo @ ebs . net>
Indexed By Thread Previous: Re: Firewalls over NT vs. UNIX
From: C Matthew Curtin <cmcurtin @ research . megasoft . com>
Next: RE: Firewalls over NT vs. UNIX
From: Douglas Cheline <dcheline @ genuity . net>

Google
 
Search Internet Search www.greatcircle.com