Schmehl, Paul L wrote:
Given that scenario, please apply your scintillating logic to the problem of patching this machine to protect it against threats that were discovered *after* SP2.
How about setting up a transparent firewall (that is, a Linux bridging box with firewall patches applied, so it is able to filter packages that travvel through the bridge). Another way would be setting up something like hogwash (iirc). This way one could react to every vulnerability by setting up correct filters / filter patterns.
Nevertheless I guess I had to live with one minus point, as I currently see no way to insert the box without any interruption of service. A (very short) interruption will occur, but as long as the machine relies on tcp it should handle the short networking outage.
Just my 0.02$
Bye, Mike
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
