nanog mailing list archives

Re: Synology Disk DS211J


From: Jay Ashworth <jra () baylink com>
Date: Thu, 29 Sep 2011 18:40:58 -0400 (EDT)

----- Original Message -----
From: "Nathan Eisenberg" <nathan () atlasnetworks us>

And this is why the prudent home admin runs a firewall device he or she can
trust, and has a "default deny" rule in place even for outgoing connections.

The prudent home admin has a default deny rule for outgoing HTTP to
port 80? I doubt it.

Why not?  You can poke holes in it specific to *workstations*; anything that
isn't a workstation doesn't generally need to be phoning home without you 
knowing about it...

Cheers,
-- jra
-- 
Jay R. Ashworth                  Baylink                       jra () baylink com
Designer                     The Things I Think                       RFC 2100
Ashworth & Associates     http://baylink.pitas.com         2000 Land Rover DII
St Petersburg FL USA      http://photo.imageinc.us             +1 727 647 1274


Current thread: