HTTP/3 needs us to make firewall changes

Re:HTTP/3 needs us to make firewall changes by sneak on Saturday June 05, 2021 @09:39PM (#27409982)

As pointed out elsewhere in thread, if your users are untrusted and not under your direct administrative control (e.g. students in a dorm, hotel guests, et c) then default-allow-everything jeopardizes your upstream transit connection (e.g. if they start spamming).

You owe it to others on the internet to not allow everything out indiscriminately from untrusted strangers who happen to be on your access network. It’s just neighborly to make sure you’re not sending ddos or spam, for example.

[ Parent | on HN ]

Re:HTTP/3 needs us to make firewall changes by serendipitous on Sunday June 06, 2021 @06:38AM (#27412147)

> if your users are untrusted and not under your direct administrative control (e.g. students in a dorm, hotel guests, et c) then default-allow-everything jeopardizes your upstream transit connection (e.g. if they start spamming).

How is that different from an ISP? Or do you think ISPs should also block everything except TCP ports 80 and 443?

[ Parent | on HN ]

Re:HTTP/3 needs us to make firewall changes by sneak on Sunday June 06, 2021 @10:23AM (#27413370)

ISPs throttle and block lots of things. Many residential ISPs block port 25, for example.

[ Parent | on HN ]