Re: solution time for www/smtp hole

• Mail folder: WWW Talk Jul-Oct 1993
• Next message: Keith Moore: "Re: WWW Security Hole -- Bull! "
• Previous message: Marc Andreessen: "Re: anchors with the same name."
• In-reply-to: Marc Andreessen: "solution time for www/smtp hole"
• Reply: Marc VanHeyningen: "Re: solution time for www/smtp hole "

Date: Thu, 12 Aug 1993 22:57:50 -0400 (EDT)
From: Rob Raisch <raisch@ora.com>
Subject: Re: solution time for www/smtp hole
To: Marc Andreessen <marca@ncsa.uiuc.edu>
Cc: www-talk@nxoc01.cern.ch
In-reply-to: <9308130013.AA21498@wintermute.ncsa.uiuc.edu>
Message-id: <Pine.3.03.9308122248.B17376-a100000@ruby.ora.com>
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Status: RO

On Thu, 12 Aug 1993, Marc Andreessen wrote:

> OK, let's bring this thing to a close.
> 
> How about we start disallowing Gopher connections to anything other
> than 70 and 71 (some Gopher servers use the latter), HTTP connections
> to anything other than 80, Z39.50 and 210, and NNTP connections to
> anything other than (whatever the NNTP port is), etc. -- except for
> >1024, which is wide open.

BRRRRAAAAPPPP.... Sorry.  Not acceptable.  Many, many gophers run on other
ports than 70.  Most of the stuff I admin runs on other ports for the
simple reason that to limit access to a section of your gopher hierarchy
you need to run another server.

I think that I am not alone here.  </rr>