Firewalls: Filtering outbound packets

Firewalls
(February 1997)

Indexed By Thread: [Previous] [Next]

Subject:	Filtering outbound packets
From:	Mark Smith <msmith @ usair . com>
Date:	Mon, 03 Feb 1997 10:57:57 -0500
To:	firewalls @ GreatCircle . com
Reply-to:	msmith @ usair . com

What is the general practice for readers of this list on filtering
outbound packets at the router between the ISP and the DMZ ?  

The original intent was to limit the chances of mounting
attacks/FSP/general bad stuff using our site as base camp.  Now,
however, we have a mail application which appears to drive the router at
max CPU, allegedly due to the filtering in place.   That outbound
filtering allows only the "good" protocols to their known ports.

Indexed By Date	Previous:	Re: Sidewinder vs. Cyberguard From: "K.M." <goertzek @ wangfed . com>
Indexed By Date	Next:	Re: to source or not to source? (was: [NTSEC] ActiveX, MSIE and Quicken) From: peter @ baileynm . com (Peter da Silva)
Indexed By Thread	Previous:	RE: Duplicated network addresses From: Jerry Mendes <mendes @ garnet . berkeley . edu>
Indexed By Thread	Next:	Re: Filtering outbound packets From: mike @ ptes . com (Mike Bernhardt)