Re: Firewalls - Ease of Use and Maintenance?

2011-11-10 Thread Richard Kulawiec
On Thu, Nov 10, 2011 at 09:39:29AM -0600, -Hammer- wrote: > OK. Right off the bat you know I can't and won't. Right. I know you can't and won't. I can't either. So we can summarily dismiss all the concerns about liability because they have no relationship to reality. You will not be suing Bi

Re: Firewalls - Ease of Use and Maintenance?

2011-11-10 Thread Richard Kulawiec
On Thu, Nov 10, 2011 at 08:30:46AM -0800, Jonathan Lassoff wrote: > > As I said, it's not a pf problem. ?Commercial firewalls will do all this > > sort of thing off the shelf. ?It's a pain to have to write scripts to do > > this manually. > > Agreed. This is rather a pain to have to do manually ea

Re: Firewalls - Ease of Use and Maintenance?

2011-11-10 Thread Richard Kulawiec
On Thu, Nov 10, 2011 at 08:52:22AM -0600, -Hammer- wrote: > The other high cost of "free" that people sometimes overlook is > liability. Please point to an instance (case citation, please) where a commercial firewall vendor has been successfully litigated against -- that is, held responsible by a

Re: Firewalls - Ease of Use and Maintenance?

2011-11-09 Thread Richard Kulawiec
On Wed, Nov 09, 2011 at 03:32:45PM +0300, Alex Nderitu wrote: > An important feature lacking for now as far as I know is content/web > filtering especially for corporates wishing to block > inappropriate/time wasting content like facebook. 1. That's not a firewall function. That's a censorship f

Re: Firewalls - Ease of Use and Maintenance?

2011-11-09 Thread Richard Kulawiec
You will find it very difficult to beat pf on OpenBSD for efficiency, features, flexibility, robustness, and security. Maintenance is very easy: edit a configuration file, reload, done. ---rsk

Re: XSServer / Taking down a spam friendly provider

2011-10-27 Thread Richard Kulawiec
On Wed, Oct 26, 2011 at 08:22:53PM -0400, Chris wrote: > For folks who say hosting companies are not helpful: Linode, Amazon, > BurstNET, Ubiquity Servers and others are extremely responsive to > abuse complaints. Burstnet is one of the filthiest sewers on the entire Internet. Has been for many y

Re: Spam?

2011-07-14 Thread Richard Kulawiec
On Thu, Jul 14, 2011 at 06:48:54PM +1200, Don Gould wrote: > OMG can't you people run proper spam filtering on your own mail > servers that filter out the nanog messages that are spam?! One of the fundamental principles of spam mitigation is that blocking is usually best (in terms of: efficacy, ac

Re: NANOG List Update - Moving Forward

2011-07-13 Thread Richard Kulawiec
On Tue, Jul 12, 2011 at 04:13:10PM +0200, Mattias Ahnberg wrote: > I might have missed some discussion; but why are we moving > away from mailman, and what software is in the new system? Seconded. Mailman is presently the gold standard for mailing list management [1], and while a lift-and-drop of