Re: blocking icmp...
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wed, May 28, 2003 at 09:13:30AM -0600, Gary Hennigan wrote:
> I was on @Home for about a month. Anyway, blocking ICMP is the least
> of my worries if I have to talk to support. Next time, for fun, call
> your support line and tell them you're running an OpenBSD firewall
> that's connected to your cable modem and prepare for, if you're lucky,
> a profound silence. In most situations I'd expect to hear "that's not
> supported". In general, if I have to talk to support I swap
> cables in my wiring closet and hook my Win2k box up directly to my
> cable modem and then call support.
The way I've always handled it has been, "I'm not running Windows, but
I'm willing to give what you tell me a shot. Here's what I've tried
so far..." Usually after a few seconds of bargaining, I can convince
them that I'm not asking for a diaper change like the rest of thier
customers and I'm willing to do the bulk of the work, I'm just using
them for a fresh perspective since they might have something to try
that I don't. I don't call into tech support often, but when I do,
I've experienced about a one in three chance of getting someone like
me who has the knowledge outside the Winmac world and finds it easier
to apply it than recite the company line.
> Best idea: Use any and all tools at your disposal for security,
> *including* obscurity.
Yes, but don't let obscurity contradict the standards.
- --
.''`. Baloo Ursidae <baloo@ursine.dyndns.org>
: :' : proud Debian admin and user
`. `'`
`- Debian - when you have better things to do than fix a system
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
iD8DBQE+1XcZJ5vLSqVpK2kRAgQ4AJ9dGphoVU18rT/iZvv+Ly5vnDXGxQCfY+Kw
pjFzFm4R58WSC/R4U6zMmiM=
=Kq5B
-----END PGP SIGNATURE-----
Reply to: