[Dshield] ISP Firewall Support (was: Microsoft ASN.1)

Johannes B. Ullrich jullrich at sans.org
Fri Feb 13 00:03:02 GMT 2004


On Thu, 2004-02-12 at 18:25, ECJB wrote:
> What about the broadband ISP providers who *REFUSE* to help you if you 
> are thusly configured?

Yes. this makes an important point: Even simple firewalls can
be complex to manage. Which is one reason why ISPs will not
support them, unless you pay extra. First of all, every firewall
is different. Secondly, even simple firewalls can add enough
extra complexity into a system to make debugging connection
problems impossible.

One more argument for ISPs to take over more control of their
networks.



CTO SANS Internet Storm Center               http://isc.sans.org
phone: (617) 837 2807                          jullrich at sans.org 

contact details: http://johannes.homepc.org/contact.htm
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20040212/99b28780/attachment.bin


More information about the list mailing list