On 14 Oct 99, at 13:14, Eric wrote:
> What is clear is that the ISP has the ability to do certain things very
> easily and inexpensively that may be quite difficult for most customers
> to do. For example, using access-lists to deny non-established
> access to certain ports frequently scanned by script kiddies is quite
> easy to do.
Isn't this true only if they have every outside connection plugs
into a router? An ACL at the ISP's router doesn't protect me from
the kiddie across town who happens to use the same ISP I do. And
forcing every customer to be on their own subnet probably isn't much
more practical than putting a firewall on every connection....
David G
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]