nanog mailing list archives

Re: The End-To-End Internet (was Re: Blocking MX query)


From: Cutler James R <james.cutler () consultant com>
Date: Wed, 5 Sep 2012 18:21:09 -0400

On Sep 5, 2012, at 5:12 PM, Izaac <izaac () setec org> wrote:

   Since tcp25 filtering has been so successful, we should deploy
  filters for everything except tcp80 and tcp443 and maaaybe tcp21 --
  but NAT already does so much to enhance the user experience there
  already.  And what with ISP customers using their provided DNS and
  mail service exclusively, there's no reason to permit udp53, tcp110,
  tcp143, tcp993, tcp995 either.  Really, only evil people use anything
  but the web.  Any other traffic undoubtedly a bot from which they
  ought to be protected.

Izaac,

You do realize that that the NANOG mailing is archived and some helpful person will quote you to their favorite 
legislator?

James R. Cutler
james.cutler () consultant com






Current thread: