Router-Gateway-Firewall solution for less than 150??

[Nancy Sollars]

----- Original Message -----
From: "George Toft" <george@georgetoft.com>
To: <plug-discuss@lists.plug.phoenix.az.us>
Sent: Saturday, March 09, 2002 10:12 PM
Subject: Re: Router-Gateway-Firewall solution for less than 150??


> Passing on issues it not a bad thing.  Claiming a product is
> rootable warrants an explanation with references.
>
> If I claim McAfee Anti-virus is a bad product, I offer very
> little.  If I say McAfee Anti-virus is a bad product, and
> demonstrate that it cannot detect the Sub-Seven trojan, I offer
> more (OBTW - this is why I will not use McAfee anymore).  If I
> report the issue to the vendor, I have fulfilled my
> responsibilities.
>

I dont see that software i dont write is my responsability

> You stated: "its kinda the same as Netmax products i found it
> easy to gain root through the running of daemons."  I'm asking
> for substantiation of your claim, or a retest with the current
> version to see if the problem still exists.  Did you report it?
> Did you document your exploit do they can make a better product?
> Or did you just sit back and let people get hacked?  I have
> filed bug reports on mc (2), linkcheck (3), and rpm (2); and
> I'm about to file one on grip.

cool,  I led my peers to what i found and things were sent to the companies

but i dont do it personally,

I guess this begs the questions for every bug exploit that is found in M$ is
it reported?

probably not because most of the time nothing is done about it anyway.

>
> Crappy software needs to be fixed.  You can either be a part of
> problem or a part of the solution.
>

I dont see i fall in either catagory ..


> George
>
>
>
> Nancy Sollars wrote:
> >
> > Was just telling how it was ...
> >
> > I guess just passing on issues found is a bad thing .. So if someone
does
> > get rooted then il not respond when someone starts shouting about it ...
> >
> > I did'nt say that E-smith was a bad product i said it was bad because as
you
> > should well know running processes on a firewall such as web or mail
servers
> > is potentially risky ..
> >
> > ----- Original Message -----
> > From: "George Toft" <george@georgetoft.com>
> > To: <plug-discuss@lists.plug.phoenix.az.us>
> > Sent: Saturday, March 09, 2002 6:26 PM
> > Subject: Re: Router-Gateway-Firewall solution for less than 150??
> >
> > > N.
> > >
> > > Since e-smith is well regarded on this list, instead of
> > > casting dispersions on the product, why don't you post
> > > credible references showing these flaws, or test the
> > > current version of the software for the vulnerabilities
> > > that you know and post the results on the list?
> > >
> > > George
> > >
> > >
> > > Nancy Sollars wrote:
> > > >
> > > > mmm if its anything like the software we ( LinuxIT ) were pushing
for
> > them
> > > > back in the UK i still have my doubts ..
> > > >
> > > > I had alot of time to run various install types of the E-Smith
software
> > ..
> > > > its kinda the same as Netmax products i found it easy to gain root
> > through
> > > > the running of daemons.
> > > >
> > > > I guess being business partners / Distributors for these co's gives
one
> > a
> > > > very good head start.
> > > >
> > > > Nige
> > > >
> > > ________________________________________________
> > > See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail
doesn't
> > post to the list quickly and you use Netscape to write mail.
> > >
> > > PLUG-discuss mailing list  -  PLUG-discuss@lists.plug.phoenix.az.us
> > > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> > >
> >
> > ________________________________________________
> > See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't
post to the list quickly and you use Netscape to write mail.
> >
> > PLUG-discuss mailing list  -  PLUG-discuss@lists.plug.phoenix.az.us
> > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't
post to the list quickly and you use Netscape to write mail.
>
> PLUG-discuss mailing list  -  PLUG-discuss@lists.plug.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>