On Wed, 2005-08-24 at 09:15:48 -0400, Timothy Donahue proclaimed... > "A Good Thing"(TM) when done correctly, it is NAT that is not necessarily a > good thing. Filtering incoming (and possibly outgoing traffic) helps do > several things, first it decreases the burden on your hosts. It also allows > you a place to stop traffic that should never leave your network, for > example, only your mail servers should be allowed to send traffic on port 25.
Ha, sure. Now get a job outside your little corporate entity and see how that goes over. Then let us decide on our own policies.