[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: xinetd /etc/host.deny ALL:PARANOID



On Sat, Jan 12, 2002 at 11:31:51AM +0100, Christian Kurz wrote:
[ snip ]
> > Everything that is possible is not necessarily a good idea.
> 
> So far I agree with you.
> 
> > However, I must admit I was talking from memory; I'm travelling at the
> > moment and don't have time to read the RFCs, but I am sure you won't
> > find the statement there.  I am sure I read it somewhere, perhaps
> > Cricket Liu's book, I don't remember.  it made a strong impression on
> > me as a "Best Practice".  If you are offended by such a categorization
> > ...
> 
> It has nothing to do with categorization. But you talked about an
> incorrectly set up DNS and that's wrong. The DNS example that Martin
> used by not have been a good choice or good pratice, but it was correct
> according to the RfCs. So I'm not offended by categorization, which also
> should be avoided, but I was annoyed about your statement "you just set
> up your DNS incorrectly".

Ok, "you've done something stupid that is, however, allowed by the
RFCs."  Is that better? :)

Regards,

-- 
Nathan Norman - Staff Engineer | A good plan today is better
Micromuse Ltd.                 | than a perfect plan tomorrow.
mailto:nnorman@micromuse.com   |   -- Patton

Attachment: pgpbHiNQzATeO.pgp
Description: PGP signature


Reply to: