[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-developers] OS-discussion
- Subject: Re: [cobalt-developers] OS-discussion
- From: Regis <crescen7@xxxxxxxxxx>
- Date: Thu Mar 28 12:22:09 2002
- List-id: Discussion Forum for developers on Sun Cobalt Networks products <cobalt-developers.list.cobalt.com>
On Thu, 2002-03-28 at 13:20, E.B. Dreger wrote:
> > Date: Thu, 28 Mar 2002 09:51:07 -0800
> > From: Jeff Lasman <jblists@xxxxxxxxxxxxx>
>
>
> > > Those of us who provide proper colo shield our customers from one
> > > another by using VLANs terminated on such a router/firewall.
> > > Will be bringing up another couple in the next week if certain
> > > software packages stabilize.
> >
> > Okay Eddy, obviously I've got a lot to learn. I'd love to keep picking
> > your brains on this; for example, any ideas where to get a good
> > reference book, or what terms to type in when I search the web?
>
> "VLAN" and ("802.1q" or "trunking") would be what I try. Or one
> could always RTFM the manual for, say, an HP Procurve or other
> VLAN-capable switch. :-)
>
> Note that one also needs a capable router to terminate the VLANs;
> the connection from the switch to the router must use tags to
> successfully trunk the traffic.
>
> And, now that patches such as zlib and Squid seem to be calming
> down, I have some OpenBSD firewalls to build for clients. :-)
>
>
> > Is it time to take this conversation offlist, or are other readers
> > interested in it as well?
>
> IMNSHO, others _should_ be interested in this. Security is a
> many-layered process, and this is one layer of many. Obviously,
> encryption helps, but isn't perfect. And, when it's not much
> harder to do it right, why do it wrong?
>
> Or maybe we should go off-list and keep the gems secret, if other
> people truly don't care. ;-)
>
> Seriously: I hope that this stuff doesn't fall on deaf ears.
>
Are you kidding, this discussion has been among the most informative and
important of the things I've seen on this list. No offense, but a
steady diet of "where can I find a .pkg for ?????" gets a bit dull.!