Great Circle Associates Firewalls
(February 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: irc and firewalls
From: Todd Graham Lewis <lists @ reflections . mindspring . com>
Date: Thu, 27 Feb 1997 11:27:27 -0500 (EST)
To: Gordy Thompson <gordy @ nytimes . com>
Cc: Firewalls Mailing List <firewalls @ GreatCircle . COM>
In-reply-to: <Pine . LNX . 3 . 91 . 970228033327 . 1447A-100000 @ mail>

As pertains to the people who really need to do IRC, this is how we've
handled it.  People who need to do IRC, as attested by their boss, have a
machine outside the firewall on which they do IRC, or they do it from an
unprotected Unix box (with ssh, icmplog, no telnet, etc.)

This solves a couple of problems.  First, once the requirement is in place
that people have their boss's approval to use IRC, 95% of the requests
disappear, as does 40% of the whining.  Second, it doesn't compromise
security.  If they're just doing IRC, then they can usually be old
machines.  Finally, for internal IRC, which some people use, we just throw
a standalone IRC server behind the firewall. 

Problem solved.  If it's only a few people, then finding some old 386's
and putting Linux/mirc on them should be a minimum of a financial burden,
as would putting 10 vt100s terminals off of a single 386.  8^) 

Come on, by now you guys know I was going to get a mention of Linux in
_somewhere_.

__
Todd Graham Lewis          MindSpring Enterprises      tlewis @
 mindspring .
 com



Follow-Ups:
References:
Indexed By Date Previous: Re: irc and firewalls
From: peter @ baileynm . com (Peter da Silva)
Next: Re: irc and firewalls
From: ArkanoiD <ark @ paranoid . convey . ru>
Indexed By Thread Previous: Re: irc and firewalls
From: S M Phillips <phillist @ ramhb . co . nz>
Next: Re: irc and firewalls
From: Kevin McPeake <cowboy @ home . byelex . nl>

Google
 
Search Internet Search www.greatcircle.com