Exploits, Blocks, and the Innocent
 |
I've had yet ANOTHER recent spate of complaints regarding the blog and those who have become firewalled.
Funny how the dotcom and dotnet sites though behind the SAME firewall are never whined about.
It seems that some feel that I should just firewall the individual offending IPs and not the entire subnet containing it. Nice try.
I decline to allow your subnet to access my assets in the presence of threats from your network or subnet thereof. Case closed.
I used to be more open to granular firewall rules but dullards like those at MIT, the Netherlands, of course Russia — and the eastern bloc in particular — who mistakenly think they can outdo me on my own network have convinced me that the practice is weakness.
I pride myself on the preemptive strike. I'll take out traffic that hits my machine with any suspicious activity without giving it a second thought. It makes for a lack of popularity in the ether.
So if you can't get to the stuff yet feel you've never attempted an exploit I'm sorry. Police your subnet better if you feel privileged ...
I'm fresh out of apologies for my security policies.
 |