nanog mailing list archives

Re: quietly....


From: Nicholas Suan <nsuan () nonexiste net>
Date: Thu, 3 Feb 2011 01:24:16 -0500

On Thu, Feb 3, 2011 at 12:18 AM, Jay Ashworth <jra () baylink com> wrote:

Complexity of the configuration vastly increases the size of the
attack surface: in a NATted edge network, *no packets can come in
unless I explicitly configure for them*; there are any number of
reasons why an equivalently simply assertion cannot be made concerning
the configuration of firewalls, of whatever type or construction.

I've always wondered how many consumer routers aren't actually


Current thread: