CircleID

Comments

NAT: Just Say No

• Comment posted Nov 09, 2003 7:27 pm PST — by Phil Howard
  A "correct firewall" will also deny by default, and provide the owner/operator/administrator with a simple tool to designate what services are to be open.  A user not smart enough to know he needs to turn services on to make the…

• Comment posted Nov 09, 2003 5:45 pm PST — by Phil Howard
  Having all IP addresses public is not any less secure or vulnerable, given a correct firewall configuration.  If you deny by default, and open exactly what should be allowed (address and port tuple), you are as secure as the firewall…

An Unsanctioned Whois Database

• Comment posted Nov 09, 2003 4:50 pm PST — by Phil Howard
  Some domains may be registered, but have no active DNS for whatever reason.  So we should not get rid of the usual whois database.  But otherwise, DNSWI would be a very good way to augment the traditional whois data.  And…

Blacklisting Under Wrong Assumptions

• Comment posted Nov 12, 2003 8:47 pm PST — by Phil Howard
  I would definitely not consider myself to be a "less-experienced" system administrator as you mention in your article; I have 24 years of such experience, of which the last 10 involves internet access and email servers.  Yet, I do regularly…

ICC and the U.N. Takeover

• Comment posted Dec 12, 2003 7:09 pm PST — by Phil Howard
  I should point out that there seems to be a problem with the "Business @ WSIS" web site, which sometimes shows no content at all, and sometimes shows incomplete content.  Having FLASH on a website that should be providing information…

• Comment posted Dec 12, 2003 3:17 am PST — by Phil Howard
  Dear Mr. Corbett In your posting, you refer to articles regarding Mr. Abu-Ghazaleh's proposal on 2 websites.  Neither provides a link to the actual proposal text.  As they say, "the devil is in the details".  All too often governments tell…

WSIS: What Is It 'Really' All About?

• Comment posted Jan 02, 2004 6:29 am PST — by Phil Howard
  There really is nothing stopping any country from simply going ahead and establishing their own regional root servers.  They can just do it and distribute their own hints files.  They could even mandate their use in law.  Whether they do…

Using Whois to Enforce Law?

• Comment posted Feb 24, 2004 2:23 am PST — by Phil Howard
  How about a whois system that allows those who wish to provide verifiable identity to do so, and those who elect to remain anonymous to do that, but to outlaw the presentation of an identity that is specifically fraudulent, either…

IP or NAT IP: Mostly IP

• Comment posted Feb 24, 2004 2:47 am PST — by Phil Howard
  I believe that certain security requirements should be required of users, and be forced upon them, to prevent the major forms of abuse that is otherwise hard or impossible to mitigate.  The most prevalent form right now is viral infections…

A Year of CAN SPAM

• Comment posted Jan 17, 2005 12:15 am PST — by Phil Howard
  What went "wrong" with CAN SPAM happened in 2003.  I think we know that it wasn't really intended to address the problem of the volume of spam.  To members of Congress and the bulk of their constituents, who know nothing…

Hijacking of Panix.com: A Call for An Emergency Rollback Procedure

• Comment posted Jan 18, 2005 12:34 am PST — by Phil Howard
  It looks like panix.com is back. But, something obviously needs to be fixed.  What I'd like to know is what went wrong in the first place.  The rumor mill (e.g. Slashdot) says panix.com was in a locked state and that…

Customer Service is Law: The Panix Story

• Comment posted Jan 18, 2005 4:37 am PST — by Phil Howard
  Thanks for setting the facts straight, Bruce.  I sure hope you can let people know about your perspective on what happened, and how this might be avoided in the future.  Regardless of any errors at your end, it sure seems…

• Comment posted Jan 18, 2005 1:00 am PST — by Phil Howard
  It's good news that Bruce Tonkin of MelbourneIT fixed this.  But we also need some answers to important questions about what went wrong, some of which need to come from MelbourneIT.  The first is why (if VeriSign says the registrars…

Preventing A New World Internet Order

• Comment posted Jan 18, 2005 10:13 pm PST — by Phil Howard
  I don't understand why these few countries feel they need to propose global rules.  They seem to be doing it internally within their own countries, anyway.  I'm sure they would want to resist any global effort to open them up. …

Closer Look at Domain Name Transfer Policy and the Hijacking of Panix.com

• Comment posted Jan 20, 2005 12:29 pm PST — by Phil Howard
  My next worry is a less than honorable registrar, or one that is directly broken into.

The .net Top Level Domain and Cross-Coupled Failures

• Comment posted Jan 22, 2005 6:40 am PST — by Phil Howard
  I have always suggested that anyone setting up a domain use name servers "in bailiwick".  I think this advice should apply to all top level domains.  Thus the name servers for .net should be in .net, the name servers for…