Re: Kerio PF

Duane Arnold wrote:
> Ansgar -59cobalt- Wiechers wrote:
>> Duane Arnold wrote:
>>> There is no such thing as a program running behind a FW that makes
>>> or initiates contact with a remote program/application that is not
>>> the one doing the solicitation. So how can such a
>>> program/application running on the machine unsolicitedly do anything
>>> if it's the one doing the solicitation, which causes the ports to be
>>> open on the FW and the program listing on the opened ports due to
>>> its solicitation?
>>
>> Read again.
>
> Read it again for what? If one doesn't want something to run, then
> one should be going to the O/S to stop it and not some personal FW to
> stop it that can be circumvented and defeated.

Sometimes people accidentally run applications that do this. Sometimes
applications can't be unbound from external interfaces (and cannot be
replaced for whatever reason). Not allowing arbitrary applications to
open listening ports helps mitigating risks.

cu
59cobalt

-- 
"If you think technology can solve your security problems, then you
don't understand the problems and you don't understand the technology."
--Bruce Schneier