Common advice is, yes... but I know specific examples of a very large ISP that missed something like that, and a middling-sized company, and my ex charlady. Errare humanum est, I suppose.