From: Johannes Ullrich (no email)
Date: Wed Sep 03 2003 - 14:33:20 EDT
I just summarized my thoughts on this topic here:
http://www.sans.org/rr/special/isp_blocking.php
Overall: I think there are some ports (135, 137, 139, 445),
a consumer ISP should block as close to the customer as
they can.
One basic issue is that people discussing this topic on
mailing lists like these are not average home users. Most
of us here have seen a DOS prompt at some point and know
about "Service Packs" and "Hotfixes".
--
--------------------------------------------------------------
Johannes Ullrich
pgp key: http://johannes.homepc.org/PGPKEYS
--------------------------------------------------------------
"We regret to inform you that we do not enable any of the
security functions within the routers that we install."
--------------------------------------------------------------
|
|
|