On Apr 16, 2004, at 9:48 AM, [EMAIL PROTECTED] wrote:
At 09:03 AM -0700 04/16/2004, Bruce Johnson wrote:On Apr 16, 2004, at 5:53 AM, Steven Lee Stinnett wrote:
I see stuff for OSX, any recommends for firewall to work with my Earthlink
DSL and OS9.1?
No need for it at all. OS 9 doesn't have any services to exploit, so a firewall is simply not necessary. There's nothing they can do to you.
I usta agree, but no longer.
Some Macs are highly succeptable to DDoS attacks over broadband.
anything with a TCP/IP stack are susceptible to DoS attacks...the only perfect firewall is this: <http://www.dumbentia.com/pdflib/scissors.pdf>
Not the OS' fault, per se. hehehe. I took down a friend's PowerBook (OS 9.1) the other day - and I'm clamped at 256 Kbps upstream. So there is some merit in being able to turn off the ICMP responses.
Then there's the java app my housemate ran last night on her PowerBook G3 (OS 9.2.2). It tried to open 60 connections to ip's withing shockwave.com. I donno if it was intentional or spaz... An app-level firewall would have stopped this cold.
Well yes, but dear lord people are looking for something you install or turn on and that's it. App level control is *way* too granular for 99.99% of the users out there.
Bottom line: Lions and Tigers and Bears, oh my. Script kiddies, malware, etc - they're out there. And Mac OS X viruses are coming.
Bah...they're not. Here's where their low market share works n their favor, a virus can't spread efficiently if it can only infect a few percent of the potential hosts. The same monoculture that enables windows viruses to spread like wildfire inhibit the spread of any others.
Ignore the situation at your own peril. Be prepared.
<shrug>My OS X boxes have the built-in firewalls turned on, and the only holes are ssh and http. I'm not even sharing my drive, I can get in , scp files around if I want.
Pretty secure, and considering that out of the box *none* of those services are running, I'd say that at the outset OS X is pretty secure.
I'll tell you this: I'm not holding my breath waiting for them.
-- Bruce Johnson University of Arizona College of Pharmacy Information Technology Group
Institutions do not have opinions, merely customs
-- PCI-PowerMacs is sponsored by <http://lowendmac.com/> and...
Small Dog Electronics http://www.smalldog.com | Refurbished Drives | -- Sonnet & PowerLogix Upgrades - start at $169 | & CDRWs on Sale! |
Support Low End Mac <http://lowendmac.com/lists/support.html>
PCI-PowerMacs list info: <http://lowendmac.com/lists/pci-powermacs.shtml> --> AOL users, remove "mailto:" Send list messages to: <mailto:[EMAIL PROTECTED]> To unsubscribe, email: <mailto:[EMAIL PROTECTED]> For digest mode, email: <mailto:[EMAIL PROTECTED]> Subscription questions: <mailto:[EMAIL PROTECTED]> Archive:<http://www.mail-archive.com/pci-powermacs%40mail.maclaunch.com/>
Using a Mac? Free email & more at Applelinks! http://www.applelinks.com
