On 14 Oct 99, at 13:14, Eric wrote:

> What is clear is that the ISP has the ability to do certain things very
> easily and inexpensively that may be quite difficult for most customers 
> to do.  For example, using access-lists to deny non-established
> access to certain ports frequently scanned by script kiddies is quite
> easy to do.  

  Isn't this true only if they have every outside connection plugs 
into a router?  An ACL at the ISP's router doesn't protect me from 
the kiddie across town who happens to use the same ISP I do.  And 
forcing every customer to be on their own subnet probably isn't much 
more practical than putting a firewall on every connection....

David G




-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to