>The article seems to be based heavily on personal preference and opinion, and not at all on any sort of metrics...

That's the thing about an opinion column, I get to state all the opinions and personal preferences I want. I'll save the metrics for the technical articles. Having said that, you of all people should know that I never say anything I haven't already tested.

>Why would anyone put *two* personal firewalls on a server system?...

Testing and research. Thats just what I do. If I had never done all this experimentation, I wouldn't have been able to make the conclusions I have.

>For example, take into considerations such as reducing the attack surface by limiting the running services.

Reducing attack surface takes care of the code you know about or control, firewalls take care of the stuff you don't.



[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/307/30959#30959