Re: Online radio and other services

[Technical Incursion Countermeasures]

At 21:17 8/10/99 -0400, you wrote:
>We block all sites except for approved ones.  Moving to this security policy
>after allowing unlimited access is a bit like trying to stuff the genie back
>into the bottle after you've let him out :-).
>
>Brian Steele

I hate to say it Brian - but you've got a farts chance in hell without
senior management support. Best way if you can is get an IT Auditor in -
shouldn't be too expensive since you'll only need him for about 4 hours max
(thats including report writing and partner review etc etc). 

If you tell me where you're based I can recommend someone probably...

ANyway basically you'll never plug all the holes and you'll always be hated
for plugging the one you do - get the big boss to givew you a FORMAL
INSTRUCTION to block all and admit x and x a dn x and at least they'll hate
him insted :}..

good luck,

Bret


Technical Incursion Countermeasures 
[EMAIL PROTECTED]                      http://www.ticm.com/
voice mail/fax: (+65)459 6373(UTC+8 hrs)      

The Insider - a e'zine on Computer security Call for papers Vol 3 Issue 2 
http://www.ticm.com/info/insider/index.html
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]