There’s an old Robert Frost poem, ‘Mending Wall’, that I’d like to pirate<\/s> draw inspiration from and make a few adaptations to, if you don’t mind…<\/p>\n\n\n\n
Auditing Firewalls<\/em><\/p>\n\n\n\n Something there is that doesn’t love firewalls,<\/em> There’s an old Robert Frost poem, ‘Mending Wall’, that I’d like to pirate draw inspiration from and make a few adaptations to, if you don’t mind… Auditing Firewalls Something there is that doesn’t love firewalls,That opens the ports, many and varied,And spews out the code in plain text in prod;And makes gaps even two can pass abreast.The […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8,12],"tags":[],"class_list":["post-2403","post","type-post","status-publish","format-standard","hentry","category-complete-fiction","category-security"],"_links":{"self":[{"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/2403","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2403"}],"version-history":[{"count":1,"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/2403\/revisions"}],"predecessor-version":[{"id":2404,"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/2403\/revisions\/2404"}],"wp:attachment":[{"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2403"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2403"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2403"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
That opens the ports, many and varied,<\/em>
And spews out the code in plain text in prod;<\/em>
And makes gaps even two can pass abreast.<\/em>
The developers’ work’s another thing:<\/em>
I have come after them and made repair<\/em>
Where they have left not one single port blocked,<\/em>
But they would have the code loaded straight to prod,<\/em>
To please the yelping dogs. The gaps I mean,<\/em>
No one has seen them made or heard them made,<\/em>
But at spring audit-time we find them there.<\/em>
I let my neighbor know in the next cube;<\/em>
And on a day we meet to read configs<\/em>
And set firewalls between us once again.<\/em>
We keep firewalls between us as we go.<\/em>
To each open ports that have opened to each.<\/em>
And some are ranges and some are in groups<\/em>
We have to use a spell to keep them all closed:<\/em>
‘Stay where you are until our backs are turned!’<\/em>
We wear our fingers rough with scrolling down.<\/em>
Oh, just another dull video game,<\/em>
I call out the new insecurities<\/em>
There where it is we all need those firewalls:<\/em>
Where contractors connect to prod boxes<\/em>
Where file servers sit, shares all exposed<\/em>
To outsiders’ eyes. And we accept risk.<\/em>
He just says, ‘Good firewalls make good neighbors.’<\/em>
Spring is the mischief in me, and I wonder<\/em>
If I could put a notion in his head:<\/em>
‘Why do they make good neighbors? Isn’t it<\/em>
Where they segment traffic?’ But no segments,<\/em>
No zones define our flat, inner network<\/em>
Contractors here mixed with outsourcers there,<\/em>
Aren’t firewalls and segments for those neighbors?<\/em>
Something there is that doesn’t love firewalls,<\/em>
That wants it down. I could say ‘Scrums’ to him,<\/em>
But it’s not scrums exactly, and I’d rather<\/em>
He said it for himself. I see him there<\/em>
Auditing a rule that’s permit all all<\/em>
The CISO told him to accept the risk.<\/em>
He moves in darkness as it seems to me,<\/em>
Not of woods only and the shade of trees.<\/em>
He will not go behind his CISO’s saying,<\/em>
And he likes having thought of it so well<\/em>
Once again, ‘Good firewalls make good neighbors.’<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"