On Wed, Jun 04, 2003 at 09:23:00PM +0200, Sven Hoexter said: > > As always a "firewall" is the whole construct with portfilters and > users who know on wich "Install this cool Dialer button" they should > klick and on which not. Ah and a system wich receives regular vendor > patches is a part of the whole, too.
Although "fails open" is a pretty powerful argument against software firewalls, it's probably easier to get a user to download and install a new copy of Zone Alarm (especially if it has some kind of auto-update feature, which I dunno since I don't use it), than it is to get them to download a new firmware image for their hardware router and flash it. -- Shawn McMahon | Let every nation know, whether it wishes us well or ill, EIV Consulting | that we shall pay any price, bear any burden, meet any UNIX and Linux | hardship, support any friend, oppose any foe, to assure http://www.eiv.com| the survival and the success of liberty. - JFK
pgp00000.pgp
Description: PGP signature
