Subject: Re: HEADS UP: IPFilter upgraded to 3.4.29
To: None <current-users@netbsd.org>
From: Matthias Scheler <tron@zhadum.de>
List: current-users
Date: 09/29/2002 10:03:30
In article <20020919150019.C471@snowdrop.l8s.co.uk>,
	David Laight <david@l8s.co.uk> writes:
>> and if nothing can actually load filters?  wouldn't you rather be able
>> to log in and attempt to fix it?
> 
> No!  because the system is wide open to ever hacker until you notice it.

If your system is open to attacks without IP Filter running then this
is the real problem which you should address.

Packet filters should always be an additional secury measure and not
the only one.

	Kind regards

-- 
Matthias Scheler                                  http://scheler.de/~matthias/