Great Circle Associates Firewalls
(January 1998)

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: FW-1 v3.0 on NTv4.0 (with SP3 and FW-1 patches)
From: rdew @ el . nec . com (Bob De Witt)
Date: Thu, 22 Jan 1998 17:28:55 -0800
To: ferioli @ comnet . com . tr, rmurphy @ itm-inst . com
Cc: cklo @ cklo . hk . super . net, vslabs @ onwe . co . za, YYANG @ nla . gov . au, firewalls @ GreatCircle . COM

On Wed, 21JAN98, Rick Murphy said:

-----  Begin Included Message  -----
> At 03:00 PM 1/21/98 +0200, Michael Ferioli wrote:
> >
> >That's what he said: "turn if OFF and it runs ok". 
> Ok; I interpreted his statement as saying that he turned Java/ActiveX
> off (blocked it) and it works OK.. whatever. Sounds like a potential DOS
> attack to me. It's certainly not a NT bug as has been implied in this
> thread..
> 	-Rick
-----  End Included Message  -----

If I understood the original message correctly, he turned off Java/ActiveX.
This makes good sense to disable those and avoid the bugs associated with
each.  However, some of the access sites require those to download whatever
is out there.  Then what ???  Well, skip those suckers, or else turn then 
back on.  Seems there should be a better, simpler, way some of you guru's 
might come up with.  At least for UNIX and NT.  Maybe even for Win95 & Mac.

   Bob De Witt,
   rdew @
 el .
 nec .

Indexed By Date Previous: OPSEC
From: Les Arrow <larrow @ vpnet . com>
Next: Re: What _is_ a VPN, anyway? [Was: Re: Pushing the envelope...]
From: Vin McLellan <vin @ shore . net>
Indexed By Thread Previous: Re: FW-1 v3.0 on NTv4.0 (with SP3 and FW-1 patches)
From: "Billy Verreynne" <vslabs @ onwe . co . za>
Next: SNI revised -- (was: Fraudulent SA's solved)
From: daemond @ ibm . net

Search Internet Search