Re: Port blocking last resort in fight against virus

["Petri Helenius" <pete () he iki fi>]

>  
> In your world DoS traffic would be free to roam the networks as it pleased 
> without being throttled sensibly at ingress?
Throttling is a different from blocking. Sensible traffic management does not 
break applications nor network transparency. You are free to choose when to
forward each packet. 

> Or the dumb [wannabee] IT guy runs some telnet/ftp/filesharing service without
> passwords and its ok for the whole world to access the private system coz its
> his fault?
This means your application security infrastructure already failed if some filesharing
application is running on a machine which also has access to data in the internal
disk shares.

Pete