Mailinglist Archive: opensuse (1332 mails)

[Jim Henderson <hendersj@xxxxxxxxx>]

On Fri, 08 May 2009 21:11:39 +0200, Anders Johansson wrote:

> > 3.  Prevent applications that shouldn't be connecting outbound from
> > connecting outbound.  Just IN CASE something gets past the firewall and
> > AV software.
>
> and this is what I keep telling you, but you don't seem to want to
> understand: if you get to this point, *you've already lost the game*!

I don't completely disagree, but at the same time, in my experience, 
there is value to evaluating the damage and determining a course of 
action.  Sometimes the system can be salvaged.

But more to the point, if you get to that point *and don't know that 
you're there*, then you don't know that you need to take corrective 
action, whatever it is.

So having something there that tells you "hey, something got through your 
firewall that maybe you don't know about" has value as well.

Jim
-- 
 Jim Henderson
 Please keep on-topic replies on the list so everyone benefits

-- 
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx