> Why Access Carriers and also Transit Carriers not block all the RPC Ports
on ther Access Routers ?

because some of us (swiss ISPs) think the user has the right to have full
internet access (ie not blocking anything).

Personally I think the average user is not able to secure his Windows and
will be infected in ANY case. See, the other day I have reinstalled a PC,
Windows XP. I had the bad idea to have it pluged to the internet without
being behind a nat or so. Guess, once the box was installed and all the
patches applied (~120Mbytes), my PC was already infected by 3 viruses and 2
trojans.

I think we should filter some well known " unsecure ports", as 135-139 and
445 and so we do.  No user complained so far.

If a user really wants to do "whatever microsoft sharing" over the internet,
we will tell him to use pptp or anything else he could use to have a
'minimum' of security.


Pascal

----------------------------------------------
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/

Reply via email to