[102912] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Customer-facing ACLs

daemon@ATHENA.MIT.EDU (Scott Weeks)
Fri Mar 7 18:58:13 2008

Date: Fri, 7 Mar 2008 15:57:13 -0800
From: "Scott Weeks" <surfer@mauigateway.com>
Reply-To: <surfer@mauigateway.com>
To: <nanog@merit.edu>
Errors-To: owner-nanog@merit.edu




--- dave.nanog@alfordmedia.com wrote:

> To me there is no question of whether or not you filter traffic for
> residential broadband customers.

SBC in my area (Dallas) went from wide open to outbound 25 blocked by
default/opened on request. I think doing the same thing with port 22 would
hardly be an undue burden on users, and would help keep botnets in check.
------------------------------------------------


Might as well do TCP 20, 21 and 23, too.  Woah, that slope's getting slippery!

scott


home help back first fref pref prev next nref lref last post