[93854] in North American Network Operators' Group
Re: Security of National Infrastructure
daemon@ATHENA.MIT.EDU (Peter Corlett)
Fri Dec 29 18:05:52 2006
In-Reply-To: <41030.216.55.142.24.1167430776.squirrel@www.geek-guy.com>
From: Peter Corlett <abuse@cabal.org.uk>
Date: Fri, 29 Dec 2006 23:02:44 +0000
To: nanog@nanog.org
X-SA-Exim-Rcpt-To: nanog@nanog.org
X-SA-Exim-Mail-From: abuse@cabal.org.uk
Errors-To: owner-nanog@merit.edu
> Why is it that every company out there allows connections through
> their
> firewalls to their web and mail infrastructure from countries that
> they
> don't even do business in. Shouldn't it be our default to only
> allow US
> based IP addresses and then allow others as needed? The only case I
> can
> think of would be traveling folks that need to VPN or something, which
> could be permitted in the Firewall, but WHY WIDE OPEN ACCESS? We still
> seem to be in the wild west, but no-one has the b@lls to be braven and
> block the unnecessary access.
I assume you want this:
http://geekculture.com/joyoftech/joyarchives/446.html
Most "unnecessary access" I see seems to be coming from US-based IP
addresses anyway. A Great Firewall Of USA would certainly reduce the
amount of spam I get :)