Re: misunderstanding scale

[Michael Thomas <mike () mtcc com>]

On 03/24/2014 09:20 AM, William Herrin wrote:
> On Mon, Mar 24, 2014 at 3:00 AM, Karl Auer <kauer () biplane com au> wrote:
> > Addressable is not the same as
> > accessible; routable is not the same as routed.
> Indeed. However, all successful security is about _defense in depth_.
> If it is inaccessible, unrouted, unroutable and unaddressable then you
> have four layers of security. If it is merely inaccessible and
> unrouted you have two.

A distinction without a difference, IMHO. Either I can send you an 
incoming SYN or I can't.

The real battle here, IMHO, is to get the next gen CPE vendors to do the 
right thing. NANOG
folks ought to be keeping tabs on the Homenet working group and then 
DEMAND that any
CPE support its security, etc, baselines.

Mike