quietly....

Thu Feb 3 06:24:16 UTC 2011

On Thu, Feb 3, 2011 at 12:18 AM, Jay Ashworth <jra at baylink.com> wrote:

> Complexity of the configuration vastly increases the size of the
> attack surface: in a NATted edge network, *no packets can come in
> unless I explicitly configure for them*; there are any number of
> reasons why an equivalently simply assertion cannot be made concerning
> the configuration of firewalls, of whatever type or construction.
>
I've always wondered how many consumer routers aren't actually