[70213] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

RE: Worms versus Bots

daemon@ATHENA.MIT.EDU (Michel Py)
Wed May 5 11:05:13 2004

Date: Wed, 5 May 2004 08:00:36 -0700
From: "Michel Py" <michel@arneill-py.sacramento.ca.us>
To: "Matthew Crocker" <matthew@crocker.com>,
	"william(at)elan.net" <william@elan.net>
Cc: <nanog@merit.edu>
Errors-To: owner-nanog-outgoing@merit.edu


> Matthew Crocker wrote:
> We require a NAT device or true firewall on all DSL
> customer connections. We sell cheap Linksys boxes
> to customers or they can upgrade to a SonicWall.

This makes a lot of sense to me. It's not a
silver bullet, but it does help.

> I still like PPPoE for customer authentication
> because I can place individual packet filters or
> re-assign users to different contexts based on
> username/password authentication. PPPoE/NAT is a
> good combination.

Tends to be a non-issue now, but it's a lot easier to deal with PPPoE on
the Linksys than have the customer install a more or less crummy PPPoE
client on their PC. The cost of dealing with one customer that trashed
their PC installing an early PPPoE client (with the help of helpdesk :-(
is worth ten Linksys.

Michel.


home help back first fref pref prev next nref lref last post