North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Customer-facing ACLs

  • From: Scott Weeks
  • Date: Tue Mar 11 22:01:54 2008



Apologies for the delay...


--- [email protected] wrote:
On Mon, 10 Mar 2008, Scott Weeks wrote:

> The default policy is we allow eveything.  It takes no explaining.

If you don't bother to explain to the same customers who you believe 
couldn't figure out how to change the default settings, what the 
risks and how to protect their computers on the Internet, is it any 
wonder that normal user's have such a difficult time being safe on the 
Internet?
------------------------------------------

Haven't you answered this in past posts on the subject?  What are ISPs responsibilities and all...



-----------------------------
Implementing source address verification can take years, but if you
never start, you will never finish.

Implementing sanity checks for IP headers can take years, but if you
never start, you will never finish.

Implementing unsolicited/unwanted traffic controls can take years, but
if you never start, you will never finish.

Do you think caller-id/call-blocking/harrassing-call-trace were easy, or
rather they took years of hard work.  Although the technology may change,
people seem to stay the same.  And people seem to be adept at doing the
same stuff with new technology to other people.
-----------------------------


Yes, but each situation is different and you could not imagine how spread thin some netgeeks can get.  Especially in a company that doesn't understand (yet) what it is we do.  You could not imagine how thin it is here, but you REALLY learn a lot in a situation like this.


scott