Re: ipfw l b for users ?

Warner Losh (imp@village.org)
Thu, 15 Feb 1996 08:53:38 -0700


: They can do cat /proc/net/ip_blocking, too. There is not much security gain
: from hiding those rules.

Those in the firewall business will disagree with that assertion.
They will tell you that the less an intruder knows, the better. They
will tell you the more they have to do to get through something the
better. Not because it takes them more time, although that is a
secondary consideration, but because there is more change for log
entries of these activities to show up and catch the person.

Warner