[CALUG] DoD/OSI Layer 2, 3 and 4 in the real world -- WAS: open ports

[Morty]

[resending from correct From:.  I should really set up a send-hook for
calug. . .]

On Thu, Sep 15, 2011 at 05:27:58PM -0700, Bryan J Smith wrote:
> But I also understand the OP and some follow-up threads.  I wanted
> to assert that there can be "real" services and facilities below the
> transport (layer 4) details.  That's what trips a number of
> organizations up when it comes to security.

Indeed.  And there are plenty of security issues that have nothing at
all to do with IP services, such as privilege escalation, not doing
everything as root, patching, log analysis, and IP client issues such
as clickjacking.  Hence why I would recommend finding a security guide
tailored for your distro.

- Morty