Re: Internet ingress port-blocking

[Joseph Tam <tam () MATH UBC CA>]

> Outbound is a different story.  At this point, we only block two
> services outbound, port 25 for smtp and udp/tcp port 53 for DNS.  We
> want to ensure our users are going through our protected servers for
> these services.

And, to be obvious, give the rest of the internet a break and block any
outgoing source addresses not in your network (i.e. spoofed addresses).

Joseph Tam <tam () math ubc ca>