598 reputation
29
bio website nym.se
location Sweden
age 34
visits member for 3 years, 10 months
seen Jun 9 at 5:58

May
17
comment Can a file contain its md5sum inside it?
That's a large file. :)
Apr
23
comment Egress filtering on an office network?
@atdre The RFC is written from a service provider viewpoint -- "ingress filtering" there means filtering traffic coming "in" to the SP network from a customer, i.e. going out towards the Internet. The equivalent on the customer side (which this question is about) is egress filtering.
Feb
24
comment Why do people tell me not to use VLANs for security?
No doubt. :) Nevertheless, I never really liked the "VLANs shouldn't be used for security purposes" mentality, because they are used successfully for exactly that purpose every day by every ISP in the world. I made it an answer instead, because it doesn't fit in the comment field. :)
Feb
24
comment Why do people tell me not to use VLANs for security?
If you by "typically not much work" mean "typically impossible in a properly configured switch", then yes. Otherwise, no.
Feb
2
comment To firewall or not to firewall?
I think my simplified example might have been too simplified, and of course the requirements will vary with the kind of business. I would also be concerned if a bank didn't utilize as many layers of protection as possible, whereas I could see a trade-off for a smaller business with less critical data. In the latter case, increased complexity (for example correctly configuring redundant firewalls) might result in worse availability than a less secure but more easily understood solution.
Feb
2
comment To firewall or not to firewall?
Indeed, equipment that can handle line speed is the "solution" to the DDoS problem, redundant or not.