Mailing Lists (Building Internet Firewalls, 2nd Edition)

A.3. Mailing Lists

It's hard to stay up to date because technologies and approaches for firewalls and other Internet security mechanisms change so rapidly. You'll find these mailing lists helpful in keeping informed.

A.3.1. Firewalls

The Firewalls mailing list, which is hosted by GNAC, is the primary forum for folks on the Internet who want to discuss the design, construction, operation, maintenance, and philosophy of Internet firewall security systems. Send a message to majordomo@lists.gnac.net with "subscribe firewalls" in the body of the message to subscribe to the list.

The Firewalls mailing list is fairly high volume (sometimes as many as 100 messages per day, though usually more like 10 to 20 per day). To accommodate subscribers who don't want their mailboxes ﬂooded with lots of separate messages from Firewalls, a Firewalls-Digest mailing list is also available. Subscribers to Firewalls-Digest receive daily (more frequent on busy days) digests of messages sent to Firewalls, rather than each message individually. Firewalls-Digest subscribers get all the same messages as Firewalls subscribers; that is, Firewalls-Digest is not moderated, just distributed in digest form.

Further information about the Firewalls mailing list is available from:

http://lists.gnac.net/firewalls/

A.3.2. Firewall Wizards

The Firewall Wizards mailing list is a moderated mailing list for firewall developers. To subscribe, send a message to majordomo@nfr.net with "subscribe firewall-wizards" in the body of the message. More information is available at:

http://www.nfr.net/forum/firewall-wizards.html

A.3.3. FWTK-USERS

The FWTK-Users mailing list is for discussions of problems, solutions, and other issues among users of the TIS Internet Firewall Toolkit (FWTK). Subscribe to it by sending mail to majordomo@ex.tis.com with "subscribe fwtk-users" in the body of the message.

A.3.4. BugTraq

The BugTraq list describes itself as follows:

BugTraq is a full disclosure moderated mailing list for the detailed discussion and announcement of computer security vulnerabilities: what they are, how to exploit them, and how to fix them.

To subscribe, send a mail message to listserv@securityfocus.com with a message body of:

SUBSCRIBE BUGTRAQ Lastname, Firstname

ore information about BugTraq is available in the "Forums" section at:

http://www.securityfocus.com

A.3.5. NTBugTraq

The NTBugTraq mailing list describes itself as follows:

In the tradition of Aleph One's BugTraq mailing list, this list has been created to invite the free and open discussion of Windows NT Security Exploits/Bugs or *SEBs* as I call them. This list is not intended to be a forum to discuss "how to" issues, but instead should be used to report reproducible SEBs which you have personally encountered with Windows NT or its related BackOffice products.

ore information is available at:

http://www.ntbugtraq.com/

A.3.6. CERT-Advisory

New CERT-CC advisories of security fixes for Internet systems are posted to this list. Send to cert-advisory-request@cert.org for subscription requests.

Archived past advisories are available from info.cert.org via the Web:

http://www.cert.org/advisories

A.3.7. RISKS

RISKS is officially known as the ACM Forum on Risks to the Public in the Use of Computers and Related Systems. It's a moderated forum for discussion of risks to society from computers and computerization. Send electronic mail subscription requests to RISKS -Request@csl.sri.com. Back issues are available from crvax.sri.com via anonymous FTP:

ftp://crvax.sri.com/risks/

RISKS is available on the Web at:

http://catless.ncl.ac.uk/Risks

RISKS is also distributed as the comp.risks Usenet newsgroup.