nanog mailing list archives

Re: Security of National Infrastructure


From: Peter Corlett <abuse () cabal org uk>
Date: Fri, 29 Dec 2006 23:02:44 +0000


Why is it that every company out there allows connections through their firewalls to their web and mail infrastructure from countries that they don't even do business in. Shouldn't it be our default to only allow US based IP addresses and then allow others as needed? The only case I can
think of would be traveling folks that need to VPN or something, which
could be permitted in the Firewall, but WHY WIDE OPEN ACCESS? We still
seem to be in the wild west, but no-one has the b@lls to be braven and
block the unnecessary access.

I assume you want this:

http://geekculture.com/joyoftech/joyarchives/446.html

Most "unnecessary access" I see seems to be coming from US-based IP addresses anyway. A Great Firewall Of USA would certainly reduce the amount of spam I get :)



Current thread: