>>> [EMAIL PROTECTED] 06/09/05 06:08 AM >>> > seems to me that making the CMS ip secret is just security through > obscurity. > Once someone discovers that IP through whatever method, you lose that > benefit > - this means the CMS has to be secure on its own.
Yeah, what I have had in mind all along is that the metametaserver/CMS wouldn't just be a secret, but that it would be firewalled off from /all/ incoming requests except from the SMS's Knowing the IP adress wouldn't do an attacker any good unless they had a SMS being the attacker, and it is pretty hard to launch an attack when there are only a score of ip adresses to attack from and get replies. That isn't security through obscurity, it is security through dropping packets... _______________________________________________ crossfire mailing list [email protected] http://mailman.metalforge.org/mailman/listinfo/crossfire
