Subject: RE: [midcom] [Fwd: RFC 3093 on Firewall Enhancement Protocol]

From: "Christian Huitema" <[email-masked]>
Date: Mon, 2 Apr 2001 11:24:34 -0700

> From: Andrew Molitor [mailto:[email-masked]]
> 
> On Mon, 2 Apr 2001, Jiri Kuthan wrote:
> 
> > The attached RFC seems to be of tremendous relevance to midcom.
> >
> > Jiri
> >
> > RFC Editor wrote:
> > >
> > > A new Request for Comments is now available in online RFC
libraries.
> > >
> > >         RFC 3093
> 
> 	This would be a lot funnier if IP over SMTP hadn't actually
> been implemented, for essentially the reasons indicated, albeit in a
> much simpler way. As biting satire, it's pretty effective, if slightly
> spooky ;)

There are quite a few solutions for the enterprising hacker:
* PPP over telnet, which is low-tech but solid,
* IP over SSL, which makes a sturdier VPN than IP over IPSEC, 
* IP over DNS, which gains a lot of points for creativity.
In fact, the real firewall killer will probably be the wideband wireless
modem; phone sweeps are going to be very interesting if the phone
numbers are picked out of the general number space. 

This should drive home a point about firewall: they only work if the
protected users cooperate. And users would be much more likely to
cooperate if there was an organized way to cross the wall when needed...

-- Christian Huitema

_______________________________________________
midcom mailing list
[email-masked]
http://www.ietf.org/mailman/listinfo/midcom