Other than the fact that Source Routing can be used to negate network
countermeasures your logic is to a certain extent flawed anyway. A better
question would be:
"If setting DisableIPSourceRouting has little or no effect on the
operation of my system then why would I want to do anything else?"
Secure systems should come from the perspective of enabling only that
functionality which is required for them to perform their required funcions.
Taking the attitude of I will only switch off what I know to be insecure is
far more likely to result in you getting hacked when someone discovers a new
security issue.
Regards,
Bob
_________________________________________________________________
Protect your PC - get McAfee.com VirusScan Online
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963
countermeasures your logic is to a certain extent flawed anyway. A better
question would be:
"If setting DisableIPSourceRouting has little or no effect on the
operation of my system then why would I want to do anything else?"
Secure systems should come from the perspective of enabling only that
functionality which is required for them to perform their required funcions.
Taking the attitude of I will only switch off what I know to be insecure is
far more likely to result in you getting hacked when someone discovers a new
security issue.
Regards,
Bob
_________________________________________________________________
Protect your PC - get McAfee.com VirusScan Online
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963
[ reply ]