I'd have to agree with Ron. Firewalls or any other security
control implements policy. There is no way an ISP is going
to be able to implement a policy that everyone agrees with.
Don't want to get "attacked" by telnet attempts and password
guessing? OK, we'll block incoming telnet requests.
Oh, but wait, I'd like certain people to be able to
telnet to my linux machine. Oh, and they change locations,
can you make it so they can telnet from anywhere as long
as the have the proper uid and password?
My web site is getting hit so much my server bogs down. Can
you restrict access to in-state clients?
Somebody is scanning me. Can you put an IDS inline that
stops scans? (Hey, my game quit working)
ISP's should provide communications. Services and the security
of those services should be the responsibility of the customer.
Now, if the customer wants to pay more for individual, customized
filters/proxies/authentication/IDS/etc., thats another story.
Also, I sure as heck don't want to worry about what may or may not
be blocked in my Internet link when I want to implement a
new application or service.
Ron DuFresne wrote:
>
> I disagree it is the responsibility only of the ISP. It is a matter of
> *personal* responsibility, unless specifically outsourced.
>
> Thanks,
>
> Ron DuFresne
>
> On Thu, 14 Oct 1999, Kevin Johnston wrote:
>
> > I agree with you. Time Warner (RoadRunner cable modems) told me there is
> > absolutely NO security between customers and the Internet. You are ON the
> > Internet and security is the customer's problem, not theirs. They would do
> > nothing to help me. I was told this by multiple technicians at Time Warner.
> > Since I installed Nukenabber, I have noticed attacks on my home PC from a
> > wide variety of states AND countries. ISPs need to get serious about
> > security.
> >
> > ----- Original Message -----
> > From: Sweeney, Patrick <[EMAIL PROTECTED]>
> > Cc: 'The Firewalls List' <[EMAIL PROTECTED]>
> > Sent: Wednesday, October 13, 1999 1:24 PM
> > Subject: RE: Unknown internet traffic
> >
> >
> > > The really annoying thing is the Cable Companies consistently claim they
> > do
> > > block this traffic.
> > > My experience is that you can get it blocked on your local segment by
> > > calling them up and complaining.
> > > Pretty sad.
> > >
> > > -----Original Message-----
> > > From: Eric [mailto:[EMAIL PROTECTED]]
> > > Sent: Wednesday, October 13, 1999 10:51 AM
> > > To: Jeff Younker
> > > Cc: 'Carric Dooley'; 'The Firewalls List'
> > > Subject: Re: Unknown internet traffic
> > >
> >
> > -
> > [To unsubscribe, send mail to [EMAIL PROTECTED] with
> > "unsubscribe firewalls" in the body of the message.]
> >
>
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> "Cutting the space budget really restores my faith in humanity. It
> eliminates dreams, goals, and ideals and lets us get straight to the
> business of hate, debauchery, and self-annihilation." -- Johnny Hart
> ***testing, only testing, and damn good at it too!***
>
> OK, so you're a Ph.D. Just don't touch anything.
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]