[145157] in North American Network Operators' Group
Re: Synology Disk DS211J
daemon@ATHENA.MIT.EDU (Jay Ashworth)
Thu Sep 29 18:42:49 2011
Date: Thu, 29 Sep 2011 18:40:58 -0400 (EDT)
From: Jay Ashworth <jra@baylink.com>
To: NANOG <nanog@nanog.org>
In-Reply-To: <8C26A4FDAE599041A13EB499117D3C286B58F425@ex-mb-1.corp.atlasnetworks.us>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
----- Original Message -----
> From: "Nathan Eisenberg" <nathan@atlasnetworks.us>
> > And this is why the prudent home admin runs a firewall device he or she can
> > trust, and has a "default deny" rule in place even for outgoing connections.
>
> The prudent home admin has a default deny rule for outgoing HTTP to
> port 80? I doubt it.
Why not? You can poke holes in it specific to *workstations*; anything that
isn't a workstation doesn't generally need to be phoning home without you
knowing about it...
Cheers,
-- jra
--
Jay R. Ashworth Baylink jra@baylink.com
Designer The Things I Think RFC 2100
Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII
St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274
