[Mimedefang] validating 'possibly forged' helo IP's?

[Mack]

-----Original Message-----
From: Mack [mailto:mack at bassspeaker.com]
Sent: 13 January 2006 23:20
To: mimedefang at lists.roaringpenguin.com
Subject: RE: [Mimedefang] validating 'possibly forged' helo IP's?


It's a cath 22 really, how many fw/admins will configure to only d/load from
MS IP's ? (none i bet)
so it gives the if the patch can be d/loaded, so can anything else should
the server be compromised !

But then, why run windoze servers on the inet, !! only valid reason i can
think of these days is sun bought chillisoft (asp emulator for apache) which
cost a damn fortune! (oh and asp.net sucks big time! - hell paul allen (or
the MS guy who just did the PDP emu site on .net) can't even make his site
SQL safe!)

But anyway, not the list for such discuission, so i guess closing it from
this !





-----Original Message-----
From: mimedefang-bounces at lists.roaringpenguin.com
[mailto:mimedefang-bounces at lists.roaringpenguin.com]On Behalf Of
WBrown at e1b.org
Sent: 13 January 2006 13:53
To: mimedefang at lists.roaringpenguin.com
Subject: RE: [Mimedefang] validating 'possibly forged' helo IP's?


> On a tempory rule basis, as nobody but nobody should allow the servers
to
> patch themselves ,. look at the dmg this has done in the past !

Agreed.  But getting a firewall manager to open the rule every time you
want to get patches for the server will get you on their sh*t list.
Windoze servers I have to deal with download, but do not install the
patches automatically.
_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang at lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

This Email Has Been Anti-Virus Scanned