, 2007-05-01
I wrote a column for Securityfocus some time ago that aired my concerns over GIAC dropping the practical portion of their certification process. That column resulted in a lot of feedback, with most agreeing about how GIAC bungled what was up till then, the best certification around.
Expand all |
Post comment
Time for a new certification
2007-05-02
Rob Shein (1 replies)
Rob Shein (1 replies)
You said "It is only by understanding the theory that you truly understand something. An example of this is why it is good to deny inbound TCP Port 53 on your firewall. Regurgitating something that you heard on a course or in an IRC chat room isn?t good enough. You would only know why the above example is a good firewall policy by having a passing knowledge of the DNS protocol."
You know that if you block port 53 TCP traffic, you break DNS for large query responses? Port 53 TCP is used for large DNS replies, so arbitraily blocking port 53 TCP breaks DNS. It's better to disable zone transfers on name servers.
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/columns/443/34507#34507