[136777] in North American Network Operators' Group
Re: quietly....
daemon@ATHENA.MIT.EDU (Jack Bates)
Fri Feb 4 20:26:45 2011
Date: Fri, 04 Feb 2011 19:26:22 -0600
From: Jack Bates <jbates@brightok.net>
To: Owen DeLong <owen@delong.com>
In-Reply-To: <8DABAA64-1036-4B27-BCDA-D3E4833FDB4F@delong.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On 2/4/2011 6:27 PM, Owen DeLong wrote:
>> Hell, even without CPE doing it, many residential ISPs (regardless of NAT) block inbound traffic to consumers.
>> >
> Really? And they have subscribers? Surprising.
>
Mark Andrews wrote:
> I run machines all the time that don't have firewall to protect
> them from the big wide world out there. I suspect we all do. Your
> not behind a external firewall when you are at NANOG or IETF.
> Everyone doesn't suddenly get "owned" because there isn't a external
> firewall. Modern OS's default to secure.
Yes, and some of you thanked us for blocking RPC in the ISP or in the
cable modems. Many such blocks are still in place in many ISPs as there
was no reason to ever remove them. TCP/25 outbound is often blocked in
many locations as well. Just because you don't notice the firewall,
doesn't mean it doesn't exist. We stay in business when you don't notice. :)
Jack
