Reflections on Host Firewalls

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 13
Abstract: In today's Internet, the need for firewalls is generally accepted in the industry, and indeed firewalls are widely deployed in practice. Unlike traditional firewalls that protect network links, host firewalls run in end-user systems. Often the result is that software may be running and potentially consuming resources, but then communication is blocked by a host firewall. It's taken for granted that this end state is either desirable or the best that can be achieved in practice, rather than (for example) an end state where the relevant software is not running or is running in a way that would not result in unwanted communication. In this document, we explore the issues behind these assumptions and provide suggestions on improving the architecture going forward.
Publication Date: 2014-06-01
Status Note: Informational
DOI: 10.17487/RFC7288
Link: https://doi.org/10.17487/RFC7288
Author(s): Dave Thaler

Latest version of IETF RFC 7288

Document Versions — IETF RFC 7288

▶ IETF RFC 7288 (2014-06-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Bibliographic Reference(s)

UPnP Forum, "WANIPConnection:2 Service", September 2010, < http://upnp.org/specs/gw/ UPnP-gw-WANIPConnection-v2-Service.pdf >. EXTERNAL
Barnes, R., Cooper, A., and O. Kolkman, "Technical Considerations for Internet Service Blocking and Filtering", Work in Progress, January 2014. EXTERNAL
IETF RFC 793 [Superseded*]
IETF RFC 2979 [Active*]
IETF RFC 4443 [Active*]
IETF RFC 4864 [Active*]
IETF RFC 4890 [Active*]
IETF RFC 4924 [Active*]
IETF RFC 4948 [Active*]
IETF RFC 4949 [Active*]
IETF RFC 5505 [Active*]
IETF RFC 6887 [Active*]
IETF RFC 7045 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7288.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7288, Reflections on Host Firewalls. Available at https://doi.org/10.17487/RFC7288

Snippet:

IETF RFC 7288, Reflections on Host Firewalls. Available at https://doi.org/10.17487/RFC7288

HTML (ISO 690 compliant)

Preview:

IETF RFC 7288, Reflections on Host Firewalls. Available at https://doi.org/10.17487/RFC7288

Snippet:

<span class="citation"><cite>IETF RFC 7288</cite>, Reflections on Host Firewalls. Available at <a href="https://doi.org/10.17487/RFC7288" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7288</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7288, Reflections on Host Firewalls
doi: 10.17487/RFC7288
url: https://doi.org/10.17487/RFC7288

Snippet:

<li>
<cite id="bib-rfc7288">IETF RFC 7288</cite>, Reflections on Host Firewalls
<span class="doi">10.17487/RFC7288</span>
</li>

Referenced By

IETF RFC 8065 [Active*]
IETF RFC 8117 [Active*]