[DCN-TechOps] Port Blocking Proposal

[lucas at omsoft.com]

This issue is quite heated, just read a few threads from DSLReports.com and you 
will see. Some people are happy to have us blocking everything, and some of our 
customers even complain that we don't block certain things. Others see it as an 
attempt to control and watch their every move.

Currenty, we are only blocking port 139, and there are about 2 dozen customers 
who have opted out of it for various reasons. If we start blocking all the 
other ports, we may find ourselves getting calls about mysterious problems that 
can only be solved by un-blocking one or more of the ports for that customer.
Also, it may start being costly to the CPU on our gateway router if we have 
hundreds of extra lines in our ACLs. Its handling pretty well so far, so that 
may be moot, but it is something to consider.

Lucas

On 10 Sep 2003 at 13:47, Robert Nickerson wrote:

> HI
> 
> We already block these I think. Lucas should be able to tell you when he
> returns on 9/15.
> 
> THx
> RAN
> 
> > -----Original Message-----
> > From: dcn-technical-committee-bounces at velocipede.dcn.davis.ca.us
> > [mailto:dcn-technical-committee-bounces at velocipede.dcn.davis.ca.us]On
> > Behalf Of Bill Broadley
> > Sent: Wednesday, September 10, 2003 1:27 PM
> > To: Steve McMahon
> > Cc: DCN-Technical-Committee at velocipede.dcn.davis.ca.us
> > Subject: Re: [DCN-TechOps] Port Blocking Proposal
> >
> >
> > On Wed, Sep 10, 2003 at 01:22:18PM -0700, Steve McMahon wrote:
> > > Hi TechOps,
> > >
> > > I don't know to what extent DCN/Omsoft are now blocking ports, but
> > > thought this deserved discussion:
> >
> > I've been involved in numerous discussions on campus about this.
> >
> > The question becomes:
> > 	Do you reduce functionality for everyone because some don't patch?
> > 	Do you allow windows filesharing or not?
> >
> >
> > --
> > Bill Broadley
> > Mathematics
> > UC Davis
> > _______________________________________________
> > DCN-Technical-Committee mailing list
> > DCN-Technical-Committee at mailman.dcn.org
> > http://www2.dcn.org/mailman/listinfo/dcn-technical-committee
> >
> 
> _______________________________________________
> DCN-Technical-Committee mailing list
> DCN-Technical-Committee at mailman.dcn.org
> http://www2.dcn.org/mailman/listinfo/dcn-technical-committee
>