Re: Firewalling DNS

2001-10-14 Thread Laura A. Robinson
resolution; they query their configured DNS server and the DNS server performs the necessary queries, then returns a response to the client. Hope this helps, Laura Robinson - Original Message - From: Roy [EMAIL PROTECTED] To: Sanford Whiteman [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent

Re: Windows XP replaces Windows 2000 Server?

2001-10-15 Thread Laura A. Robinson
Windows XP comes in two versions- Home and Professional. Both are built on the NT kernel. XP Home is the replacement for home Windows operating systems such as Windows 95, Windows 98 and Windows ME (all of which were built on DOS). XP Home is significantly limited in its capabilities with

Re: Firewalling DNS

2001-10-15 Thread Laura A. Robinson
to the external DNS server rather than an internal DNS server, or other traffic, as mentioned. Laura Robinson ___ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls

Re: Windows XP replaces Windows 2000 Server?

2001-10-16 Thread Laura A. Robinson
. this bandwagon can leave without me. dos rules :-) -Allen - Original Message - From: Laura A. Robinson [EMAIL PROTECTED] To: d d [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Monday, October 15

Re: Firewall authentication W2K Terminal Server

2001-12-05 Thread Laura A. Robinson
beer fart LOL's... piranha... /* My Lord Tzu, the first tao of combat is learning retreat is a weapon Yuen Li, Archery Sifu to General Sun Tzu */ From: Laura A. Robinson [EMAIL PROTECTED] To: piranha [EMAIL PROTECTED], John Steniger [EMAIL PROTECTED], 'Andy Jonkers' [EMAIL PROTECTED

Re: Firewall authentication W2K Terminal Server

2001-12-05 Thread Laura A. Robinson
, 2001 11:07 PM Subject: Re: Firewall authentication W2K Terminal Server so are these but you you like 'em.. piranha... /* My Lord Tzu, the first tao of combat is learning retreat is a weapon Yuen Li, Archery Sifu to General Sun Tzu */ From: Laura A. Robinson [EMAIL PROTECTED] Reply

Re: DNS vs. the firewall

2001-12-06 Thread Laura A. Robinson
What is your DNS running on? Laura - Original Message - From: Rick Brown [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, December 06, 2001 10:31 AM Subject: DNS vs. the firewall I'm still struggling trying to get my internal DNS server to forward requests to my ISP's DNS

Re: DNS vs. the firewall

2001-12-06 Thread Laura A. Robinson
There isn't, by any chance, a zone labeled . on the DNS server, is there? If so, delete it. Also, check the root hints tab in the server properties and see what's listed there. Laura - Original Message - From: Laura A. Robinson [EMAIL PROTECTED] To: Rick Brown [EMAIL PROTECTED]; [EMAIL

Re: Win2kAdvance Server

2002-01-23 Thread Laura A. Robinson
Please note that you *can* configure NAT and port filters, but Windows 2000 in and of itself should not be considered a firewall. Laura - Original Message - From: Laura A. Robinson [EMAIL PROTECTED] To: Rodel P Hipolito [EMAIL PROTECTED]; 'Firewalls [EMAIL PROTECTED] Sent: Wednesday

Re: FW: Win2kAdvance Server

2002-01-31 Thread Laura A. Robinson
Really? You run your firewalls on oxygen? I've only been able to get mine to run on hardware. Laura - Original Message - From: Network Operations [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, January 29, 2002 9:48 AM Subject: Re: FW: Win2kAdvance Server Linux firewall = $0.00

Re: Windows domain logon through PIX firewall

2002-02-14 Thread Laura A. Robinson
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q179442 http://www.microsoft.com/windows2000/techinfo/reskit/en-us/default.asp?url=/ WINDOWS2000/techinfo/reskit/en-us/cnet/cnfc_por_simw.asp http://support.microsoft.com/default.aspx?scid=kb;EN-US;q280132 Laura - Original Message

Re: How to hide IP's in Trace

2002-03-06 Thread Laura A. Robinson
NAT is designed for more than just obscuring IPs, and if IPSec is in use in this environment, it will negate the ability to use IPSec in transport mode. Without knowing why the OP isn't using NAT, it may not be feasible for his environment. Disallowing ICMP reply packets would achieve the

Re: How to hide IP's in Trace

2002-03-06 Thread Laura A. Robinson
. Whaddaya think? Marc Laura A. Robinson [EMAIL PROTECTED] 03/06/02 11:29AM NAT is designed for more than just obscuring IPs, and if IPSec is in use in this environment, it will negate the ability to use IPSec in transport mode. Without knowing why the OP isn't using NAT, it may not be feasible for his

Re: How to hide IP's in Trace

2002-03-06 Thread Laura A. Robinson
Disallow outgoing ICMP reply packets. Laura - Original Message - From: Amarnath Gutta [EMAIL PROTECTED] To: security [EMAIL PROTECTED]; tech [EMAIL PROTECTED]; firewall [EMAIL PROTECTED] Sent: Wednesday, March 06, 2002 1:55 PM Subject: How to hide IP's in Trace Hi All, I have

Re: How to hide IP's in Trace

2002-03-06 Thread Laura A. Robinson
Well put! Laura - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, March 06, 2002 3:21 PM Subject: Re: How to hide IP's in Trace On 7 Mar 2002, at 0:25, Amarnath Gutta wrote: Hi All, I have Private IP's address in my network which I want to

Re: Personal Firewall

2002-03-22 Thread Laura A. Robinson
Tiny Personal Firewall- http://www.tinysoftware.com Laura - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, March 21, 2002 2:05 PM Subject: Personal Firewall Good Afternoon... This is my first post to this list, so I'll keep it sweet and simple. I'm

Re: RAS Server Location: Inside, Outside, or DMZ?

2002-03-25 Thread Laura A. Robinson
DMZ. Laura - Original Message - From: Robinson, Eric R. [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, March 25, 2002 3:48 PM Subject: RAS Server Location: Inside, Outside, or DMZ? Our organization is about to deploy a dial-up RAS server. We have heard noises that the location

Re: unsubscribe

2002-03-26 Thread Laura A. Robinson
I'm not gonna take you up on that bet. ;-) Laura P.S. Wes, aren't you supposed to be working? - Original Message - From: Gene Lee [EMAIL PROTECTED] To: Noonan, Wesley [EMAIL PROTECTED]; 'Laura A. Robinson' [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Tuesday, March 26, 2002 5:17 PM

Re: unsubscribe

2002-03-26 Thread Laura A. Robinson
instructions that is. Sorry - what was that? Checking before making a statement? - nah - you don't secure a network by doing that ... -Original Message- From: Noonan, Wesley [mailto:[EMAIL PROTECTED]] Sent: Tuesday, March 26, 2002 2:08 PM To: 'Laura A. Robinson'; [EMAIL PROTECTED] Subject: RE

Re: unsubscribe

2002-03-26 Thread Laura A. Robinson
a network by doing that ... -Original Message- From: Noonan, Wesley [mailto:[EMAIL PROTECTED]] Sent: Tuesday, March 26, 2002 2:08 PM To: 'Laura A. Robinson'; [EMAIL PROTECTED] Subject: RE: unsubscribe Wow. That looks remarkably like the line at the bottom of *every* single email we

Re: RAS Server Location: Inside, Outside, or DMZ?

2002-03-27 Thread Laura A. Robinson
- Original Message - From: Adrian Close [EMAIL PROTECTED] On Mon, 25 Mar 2002, Robinson, Eric R. wrote: Is there a good rule of thumb for situating the RAS server? It seems to me that the following would be true: 3. Outside: Bad from all perspectives. I don't think this is

Re: Basic DMZ Setup Questions...

2002-04-04 Thread Laura A. Robinson
A true DMZ may have a firewall between the Internet and the DMZ, as well as between the DMZ and the intranet. Laura - Original Message - From: Bill Royds [EMAIL PROTECTED] To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Wednesday, April 03, 2002 8:11 PM Subject: RE: Basic DMZ Setup

Re: Basic DMZ Setup Questions...

2002-04-04 Thread Laura A. Robinson
a speed bump against a skilled, dedicated intruder. Laura - Original Message - From: Clifford Thurber [EMAIL PROTECTED] To: Laura A. Robinson [EMAIL PROTECTED]; Bill Royds [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Thursday, April 04, 2002 4:29 PM Subject: Re: Basic DMZ

Re: Basic DMZ Setup Questions...

2002-04-04 Thread Laura A. Robinson
. With that said, as I steadfastly maintain, a firewall is merely a speed bump against a skilled, dedicated intruder. Laura - Original Message - From: Clifford Thurber [EMAIL PROTECTED] To: Laura A. Robinson [EMAIL PROTECTED]; Bill Royds [EMAIL PROTECTED]; [EMAIL PROTECTED

Re: Basic DMZ Setup Questions...

2002-04-05 Thread Laura A. Robinson
As I said, you're being pedantic. Extremely so, at this point. SANS, for No, I'm being accurate- it's like the difference between saying The true meaning of baud is bits per second and saying The popular meaning of baud is bits per second. One of the statements is facutally correct, the

Re: Basic DMZ Setup Questions...

2002-04-05 Thread Laura A. Robinson
No, you said it was the TRUE definition. No, I didn't. Learn to read. Everything else you typed is just more of the same dogma and inability to *read*, so I'm finished with this discussion. Me: A true DMZ may have a firewall between the Internet and the DMZ, as well as between the DMZ and the

Re: Basic DMZ Setup Questions...

2002-04-05 Thread Laura A. Robinson
I think that the term DMZ (de-militarized zone which is also called no-man's land) loses its useful meaning if it is used for a segment on the inside of a firewall. I know that it is commonly used for a semi-protected segment on the third NIC of a firewall. Okay, I think that perhaps there

Re: Basic DMZ Setup Questions...

2002-04-05 Thread Laura A. Robinson
You're a waste of bits. - Original Message - From: Paul Robertson [EMAIL PROTECTED] To: Laura A. Robinson [EMAIL PROTECTED] Cc: Bill Royds [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Friday, April 05, 2002 3:18 PM Subject: Re: Basic DMZ Setup Questions... On Fri, 5

Re: Basic DMZ Setup Questions...

2002-04-05 Thread Laura A. Robinson
On Fri, 5 Apr 2002, Laura A. Robinson wrote: I gave no scenario. Are you now psychic, or just overly prone to fabrication? Argue this topic all you want, but don't attribute to me what I've not said. Get over it already. Someone's forging your mail then: Okay, I think that perhaps

Re: Basic DMZ Setup Questions...

2002-04-05 Thread Laura A. Robinson
pork product; does that mean its current usage is invalid? No. You're being pedantic. Laura - Original Message - From: Paul D. Robertson [EMAIL PROTECTED] To: Laura A. Robinson [EMAIL PROTECTED] Cc: Bill Royds [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Friday, April 05

Re: Basic DMZ Setup Questions...

2002-04-05 Thread Laura A. Robinson
. Laura - Original Message - From: Paul D. Robertson [EMAIL PROTECTED] To: Laura A. Robinson [EMAIL PROTECTED] Cc: Bill Royds [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Friday, April 05, 2002 7:46 AM Subject: Re: Basic DMZ Setup Questions... On Fri, 5 Apr 2002, Laura

Re: Basic DMZ Setup Questions...

2002-04-06 Thread Laura A. Robinson
In Laura's scenerio, I gave no scenario. Are you now psychic, or just overly prone to fabrication? Argue this topic all you want, but don't attribute to me what I've not said. Get over it already. Laura ___ Firewalls mailing list [EMAIL PROTECTED]

Re: Basic DMZ Setup Questions...

2002-04-08 Thread Laura A. Robinson
Questions... Take the pointless bickering off-list please. Nobody cares. -Original Message- From: Paul D. Robertson [mailto:[EMAIL PROTECTED]] Sent: 06 April 2002 03:08 To: Laura A. Robinson Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]; Bill Royds

Re: Annoying firewall

2002-04-09 Thread Laura A. Robinson
I think you've fallen prey to a troll. Laura - Original Message - From: Florian Hobelsberger / BlueScreen [EMAIL PROTECTED] To: aormygod [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Tuesday, April 09, 2002 4:46 AM Subject: Re: Annoying firewall Hi, i am sorry but i quite disagree

Re: Annoying firewall

2002-04-09 Thread Laura A. Robinson
://www.tuxedo.org/~esr/jargon/html/entry/troll.html http://www.intersurf.com/~aevinc/aev2trol.htm Laura - Original Message - From: Laura A. Robinson [EMAIL PROTECTED] To: Florian Hobelsberger / BlueScreen [EMAIL PROTECTED]; aormygod [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Tuesday, April 09

Re: Microsoft gets into the security arena?

2002-04-11 Thread Laura A. Robinson
Hotmail hasn't run on FreeBSD for a looong time. Laura - Original Message - From: Johannes Berth [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, April 11, 2002 11:42 AM Subject: Re: Microsoft gets into the security arena? * William Stackpole [EMAIL PROTECTED] [11.04.02 17:12]:

Re: Microsoft gets into the security arena?

2002-04-11 Thread Laura A. Robinson
Hotmail hasn't run on FreeBSD for a looong time. Getting the machines that were pingable off FreeBSD took a long time, but was completed some time ago. But the backend servers that weren't directly reachable took longer than that. It has *still* been a long time since Hotmail ran on FreeBSD.

Re: unsubscibe

2002-04-14 Thread Laura A. Robinson
Follow the directions at the bottom of the page listed at the bottom of your post. (http://lists.gnac.net/mailman/listinfo/firewalls ) Laura - Original Message - From: Malkit Singh [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, April 13, 2002 12:50 PM Subject: unsubscibe

Re: Replacing my old PIX Classic

2002-04-16 Thread Laura A. Robinson
Can someone plase tell me why poeple like the Microsoft ISA Server? I don't think they generally do, I'm not aware of it gaing any significant market share, and I've rarely seen anyone using one. I would agree that it doesn't hold the market share of some of the other, better known

Re: Replacing my old PIX Classic

2002-04-16 Thread Laura A. Robinson
The current incantation (ISA Server 2000) has passed ICSA Labs certification[1] as an actual firewall, and it does work. The last two attempts in the product line certainly EARNED such scorn- the current implementation should probably be evaluated for function seperately- it's

Re: Replacing my old PIX Classic

2002-04-16 Thread Laura A. Robinson
ISA is the replacement for MS Proxy, that makes it in line, Oh, here we go again with The World According To Moses, er Paul. MSP's features were absorbed into ISA, that makes it in line, I'd put money on some code migrating as well. You need psychological help. MS Proxy is gone. ISA is

Re: Replacing my old PIX Classic

2002-04-16 Thread Laura A. Robinson
This is incorrect. ISA is *not* MS Proxy [...] comparing a proxy to a hybrid firewall and calling them the same thing Hrm. If my memory serves me, MS Proxy did packet filtering and proxying. That also classifies as a hybrid. How familiar are you with MS Proxy? It wasn't a firewall and

Re: Replacing my old PIX Classic

2002-04-16 Thread Laura A. Robinson
the text below. Reply-To: Laura A. Robinson [EMAIL PROTECTED] From: Laura A. Robinson [EMAIL PROTECTED] To: snipped for privacy [EMAIL PROTECTED] Subject: Re: Users slam Microsoft Security Analyser Date: Mon, 15 Apr 2002 18:37:07 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859

Re: Replacing my old PIX Classic

2002-04-16 Thread Laura A. Robinson
How familiar are you with MS Proxy? It wasn't a firewall I'm willing to bet real money that the majority of the MS proxy users used MS proxy as their only layer of defense. And that makes it a firewall? So if I use a Windows 2000 server (1) as my only router, it must therefore be a router?

Re: Replacing my old PIX Classic

2002-04-16 Thread Laura A. Robinson
How familiar are you with MS Proxy? It wasn't a firewall I'm willing to bet real money that the majority of the MS proxy users used MS proxy as their only layer of defense. And what does that have to do with what the product was or wasn't? NOTHING. and wasn't marketed as a firewall.

Re: Semasiology (was: RE: Replacing my old PIX Classic)

2002-04-16 Thread Laura A. Robinson
. Robertson -VS- Laura A. Robinson threads. Take it offline and post a summary or something ;-P -dale ___ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls

Re: Domain of Intrepretation

2002-04-17 Thread Laura A. Robinson
Can one of you IPSEC gurus expound on what exactly the DOI is in regards to IPSEC. Yes I have read the RFC left me going u... In plain english can someone provide me with a good working functional pragmatic explaination. I would appreciate it. I'm no guru, but very briefly put (and

Re: W2K CA server an Cisco IOS

2002-04-17 Thread Laura A. Robinson
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q272164 - Original Message - From: Bruno Fernandes [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Sunday, April 14, 2002 11:58 AM Subject: W2K CA server an Cisco IOS I am currently to integrate IPSEC in cisco IOS with a Windows

Re: W2K CA server an Cisco IOS

2002-04-17 Thread Laura A. Robinson
doesn't match, i also changed the hashing algorithm from scep module but there again the problem still the same. Any ideas, Thanks in advance, Best Regards Bruno Fernandes -Original Message- From: Laura A. Robinson [mailto:[EMAIL PROTECTED]] Sent: quarta-feira, 17 de Abril de 2002 9:52

Re: unsubscibe

2002-04-19 Thread Laura A. Robinson
What, you mean the part right below this text? To change your subscription (set options like digest and delivery modes, get a reminder of your password, or unsubscribe from Firewalls), enter your subscription email address: Laura - Original Message - From: David Caplan [EMAIL PROTECTED]

Re: DMZ

2002-04-19 Thread Laura A. Robinson
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q280132 Laura - Original Message - From: Matthew Carpenter [EMAIL PROTECTED] To: MS-Exchange Admin Issues [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Monday, April 15, 2002 10:07 AM Subject: DMZ Does anyone know what ports are

Re: Replacing my old PIX Classic

2002-05-03 Thread Laura A. Robinson
- Original Message - From: Paul Robertson [EMAIL PROTECTED] To: Laura A. Robinson [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Tuesday, April 16, 2002 7:15 PM Subject: Re: Replacing my old PIX Classic On Tue, 16 Apr 2002, Laura A. Robinson wrote: into your posts (1). ISA

Re: beating dead horses: Catalyst 4000 VLAN issues

2002-05-22 Thread Laura A. Robinson
chuckle Damn! we are awaiting to see how many broked content scanners are going to go nuts here, sicne it's already demonstrated that 'bitch' is so offnesive to so many It's getting to easy, not even a challenge these days, to get a rise outta ya grin. Ron, I know Wes personally, and I

Re: wireless woes in the triangle and beyond!

2002-06-04 Thread Laura A. Robinson
Yes, but David is insane. ;-) Laura - Original Message - From: Noonan, Wesley [EMAIL PROTECTED] To: 'Ron DuFresne' [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Tuesday, June 04, 2002 1:02 AM Subject: RE: wireless woes in the triangle and beyond! I have a buddy of mine

Re: Problems with email messages

2002-06-04 Thread Laura A. Robinson
What are you using for e-mail? OE is famous for doing this when it's decrypting. While it locks up your system, if you wait for a *really* long time, it does actually eventually figure out what it's supposed to do. Laura - Original Message - From: Pat Brown [EMAIL PROTECTED] To: [EMAIL

Re: OT: Encryption and Credit Card Processing

2002-06-13 Thread Laura A. Robinson
http://www.thawte.com/support/supercert/general.html http://www.kimnet.com/secure.html http://www.mail-archive.com/cryptography@c2.net/msg02492.html http://www.microsoft.com/technet/archive/default.asp?url=/TechNet/archive/ie /reskit/ie4/Part7/part7b.asp Laura -- Firewalls mailing list - [

Re: spam words.. (fwd)

2002-06-13 Thread Laura A. Robinson
I got the same thing. I figured since it told me to ditch the bad words, I would wait for more specific instruction. ;-) Laura - Original Message - From: Ron DuFresne [EMAIL PROTECTED] To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Thursday, May 30, 2002 4:22 PM Subject: spam words..