For those interested:
RFC 2196 (FYI 8) - Site Security Handbook (Sept 1997)
RFC 2504 (FYI 34) - Users' Security Handbook (Feb 1998)
Lot's of interesting discussions of firewalls, site security
policies, etc. Note that these are Informational RFCs and
not IETF standards - nonetheless very interesting reading.
Cheers,
- Ira McDonald (outside consultant at Xerox)
PS - In deference to Scott Lawrence, who complained last time,
I have not included the Abstracts and TOCs below.