North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Security of National Infrastructure

  • From: Mark Foster
  • Date: Fri Dec 29 18:16:16 2006 

On Fri, 29 Dec 2006, Peter Corlett wrote:




Why is it that every company out there allows connections through their
firewalls to their web and mail infrastructure from countries that they
don't even do business in. Shouldn't it be our default to only allow US
based IP addresses and then allow others as needed? The only case I can
think of would be traveling folks that need to VPN or something, which
could be permitted in the Firewall, but WHY WIDE OPEN ACCESS? We still
seem to be in the wild west, but no-one has the [email protected] to be braven and
block the unnecessary access.




I assume you want this:



http://geekculture.com/joyoftech/joyarchives/446.html



Most "unnecessary access" I see seems to be coming from US-based IP addresses
anyway. A Great Firewall Of USA would certainly reduce the amount of spam I
get :)





Hear Hear!

It'd be amazing how much easier my mail handling life would be if I could
blindly drop *.comcast.net without worrying about collateral damage.



(Some years ago I had to ring an ISP in the US - and i'm in NZ - and ask
them by _phone_ why they appeared to be filtering connections from here to
their web server, despite the fact we were one of their customers. Turns
out that they had inbound filters applied to 202/8. Whoopsie?)



Mark. (Its the Internet, not the USofA-net. Damnit!)