[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Re(2): openvpn in spite of firewalls




On Jul 19, 2007, at 9:16 AM, PETER EASTHOPE wrote:
The socket concept is sound.  Yet where administrators
insist on closing ports & etc. indiscriminately, the
concept is defeated.  I'm afraid that your software
will become a necessity in many environments.

I don't know what sort of environment you're working in, but in corporate environments it's common to set up a firewall by blocking everything, then allowing only what's necessary.  This is arguably the most secure way to arrange things, but it can be frustrating if the sysadmin's idea of what's "necessary" is strict.

In those sorts of environments it's often better to start with too much security than too little.  If you clamp down too hard, people will let you know and you can ease up a bit, but if you're being less secure than necessary you're unlikely to get any feedback. ;)


David Brodbeck
Information Technology Specialist 3
Computational Linguistics
University of Washington



Reply to: