What fun it must be being a netadmin - what don't you want to block, by which I mean wouldn't it be easier to block everything and run squid/mail server.
Yes, it *IS* *MUCH* easier to block everything and only allow out the traffic that you want. Unfortunetly *MANY* of my clients will not let me do that as they don't see any security problem(s) in what they presently have. It is my job (consultant) to enlighten my clients to the potential problems that do exist and to prevent / fix them to the best of my ability on their networks.
I am a Consultant / Systems Administrator for a small company with many clients (circa 50) with an email user base of something around 300 on my main mail server (mostly my client's email). I have to run my network at the office and the networks at my clients. I have any thing ranging from DOS 6.22 & 98 clients on Novell NetWare 4.11 IPX / IP networks, to M$ Windows 2000 with 2k and XP clients, to unix networks. I get the gauntlet and thus have to deal with a LOT of crap.
Grant. . . . _______________________________________________ LARTC mailing list LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
