[lug] UDP Port 515

[Archer Sully]

"Atkinson, Chip" wrote:
> 
> This brings up a question in my mind:  The CERT url below talks about packet
> filtering.  Is packet filtering better for some reason than various other
> means such as tcp wrappers and removal of the entire service?
> 

A wrapper can also have flaws that can be exploited.  Removing the 
service works well, but the assumption in the CERT advisory  is 
that your site will actually want to be running those services.

-- archer