This message uses a character set that is not supported by the Internet
Service. To view the original message content, open the attached message.
If the text doesn't display correctly, save the attachment to disk, and then
open it using a viewer that can display the original character set.
<<message.txt>>
Received: from dlang.diginsite.com ([10.200.255.252]) by viper.digitalinsight.com with
SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21)
id Y64Z9NB6; Tue, 19 Dec 2000 12:11:38 -0800
Date: Tue, 19 Dec 2000 12:03:08 -0800 (PST)
From: David Lang <[EMAIL PROTECTED]>
To: Jamy Klein <[EMAIL PROTECTED]>
cc: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
Subject: RE: your mail: Desktop FW LEAKing
In-Reply-To: <4D4D449EE063D411AD6900B0D03DF800401DE3@STTINT3>
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=X-UNKNOWN
Content-Transfer-Encoding: QUOTED-PRINTABLE
Jamy, if you are running a proxy based firewall it does care what goes out
port 25 or 80 or whatever.
it's still possible to tunnel through other protocols (http and https
being the new favorites) but this is not the same as just going straight
through the port
now there are not proxies available for every protocol so it's likly that
there will be a few holes, but you can reduce teh number to be quite
small, and possibly eliminate it (at the very least you can hope that the
person gives up after trying the first several and before finding the one
that it would work on)
David Lang
On Tue, 19 Dec 2000, Jamy Klein wrote:
> Date: Tue, 19 Dec 2000 14:51:50 -0500
> From: Jamy Klein <[EMAIL PROTECTED]>
> To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
> Subject: RE: your mail: Desktop FW LEAKing
>
> this isn't news... every firewall on this planet has this problem with th=
e
> exception of zonealarm. It's not just personal firewalls.
>
> Your corporate firewall doesn't care what app goes out port 25. Currently
> their is no effective way to block apps going out a corporate firewall. T=
he
> only solution thus far is to install zonealarm or something similar on ea=
ch
> workstation.
>
> It amuses me that this problem has been around since the advent of the
> firewall, and people are just now starting to care.
>
> Jamy
>
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Bernd Eckenfels
> Sent: Tuesday, December 19, 2000 12:38 PM
> To: Basti Bommel
> Cc: Lee Dana-Renee; [EMAIL PROTECTED]
> Subject: Re: your mail: Desktop FW LEAKing
>
>
> On Tue, Dec 19, 2000 at 03:21:24PM +0100, Basti Bommel wrote:
> > C=B4mon Bernd! I thin k all of us here read the letter twice
> > during the last three days. We all know about it!
> > I don=B4t bother whether if it is as "safe" as the marketing says,as
> > lonhg as I got cotrol over the apps connecting to the
> > internet and I got info about who tries to connect to my SOHO
> > ALright?
>
> But it does not. I will not take more than 2 weeks and you can read it in
> the next announcement from steve that zonelab will not detect the method
> used by the next leaktest.
>
> Greetings
> Bernd
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
