588 reputation
29
bio website nym.se
location Sweden
age 34
visits member for 3 years, 9 months
seen Jun 9 at 5:58

Mar
13
awarded  Popular Question
Dec
11
awarded  Yearling
Apr
30
awarded  Nice Answer
Dec
11
awarded  Yearling
Nov
30
awarded  Nice Question
Jun
18
awarded  Nice Answer
May
17
comment Can a file contain its md5sum inside it?
That's a large file. :)
Apr
28
answered Cisco IOS question - password management, service password encryption types
Apr
23
comment Egress filtering on an office network?
@atdre The RFC is written from a service provider viewpoint -- "ingress filtering" there means filtering traffic coming "in" to the SP network from a customer, i.e. going out towards the Internet. The equivalent on the customer side (which this question is about) is egress filtering.
Feb
24
awarded  Scholar
Feb
24
accepted To firewall or not to firewall?
Feb
24
awarded  Editor
Feb
24
revised Why do people tell me not to use VLANs for security?
added 242 characters in body
Feb
24
comment Why do people tell me not to use VLANs for security?
No doubt. :) Nevertheless, I never really liked the "VLANs shouldn't be used for security purposes" mentality, because they are used successfully for exactly that purpose every day by every ISP in the world. I made it an answer instead, because it doesn't fit in the comment field. :)
Feb
24
answered Why do people tell me not to use VLANs for security?
Feb
24
comment Why do people tell me not to use VLANs for security?
If you by "typically not much work" mean "typically impossible in a properly configured switch", then yes. Otherwise, no.
Feb
2
comment To firewall or not to firewall?
I think my simplified example might have been too simplified, and of course the requirements will vary with the kind of business. I would also be concerned if a bank didn't utilize as many layers of protection as possible, whereas I could see a trade-off for a smaller business with less critical data. In the latter case, increased complexity (for example correctly configuring redundant firewalls) might result in worse availability than a less secure but more easily understood solution.
Feb
2
comment To firewall or not to firewall?
Indeed, equipment that can handle line speed is the "solution" to the DDoS problem, redundant or not.
Feb
1
awarded  Student
Feb
1
asked To firewall or not to firewall?