since we're sharing secrets, if you download the administrators CD, the
base install without the UCB firewall config is included. Give me some
time and I could tell you exactly where.
Karl R. Grose wrote:
> --- Michael Sinatra <michael@rancid.berkeley.edu> wrote:
>
>
>>>However, when CISC talked about allowing SNS to scan through
>>
>>host-based
>>
>>>firewalls, I believe that we did weigh the risks. There were people
>>
>>on
>>
>>>both sides of the issue, but maybe the right arguments weren't
>>
>>made. The
>>
>>>standards are designed to be flexible...
>>
>>But the installer published by WSS apparently isn't flexible, which
>>is
>>Charles's point. Is allowing the SNS scanners part of Minimum
>
>
> Don't tell anyone :-) but it's trivial to change the default fw zone
> policy by using the Network Location feature of SCS:
>
> On the "Locations" tab, select "Turn on Network Detector" and choose
> one of the three defined network locations other than "Default", or
> define your own location. Only the "Default" location has the trusted
> zone defined using locked rules.
>
> --Karl
>
> -------------------------------------
> Sent via the ucb-security mailing list.
------------------------------------------------------------------------
The following was automatically added to this message by the list server:
For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.berkeley.edu/>.
Received on Tue May 10 10:26:13 2005
This archive was generated by hypermail 2.1.8 : Tue May 10 2005 - 10:26:15 PDT