I wish it were just some old boxen from 20 years ago. $employer STILL does port-based firewalling and thinks it's great policy. Just getting SSH to github requires requesting an exemption.
edit: spelling
> some old boxens
Aside: in this vernacular, plural of ox is oxen; plural of box is boxen. “boxens” is never appropriate.
DNS SRV. So much promise. Ultimately just became "I know where exchange is!"
Re:Reclaiming IPv4 Class E's 240.0.0.0/4
by mschuster91 on Tuesday May 28, 2024 @04:35AM
(#40498676)
> $employer STILL does port-based firewalling and thinks it's great policy.
And they're not wrong either, it by definition disables not just a whole class of (admittedly outdated) communication channels for malware (such as IRC), but also other stuff you don't want to happen on your network either: bittorrent, people running online games during work...
Isn’t it trivial to run these on another port?
The disappointment is there seems to be no difference between "needing a single open port" and "needing and entire IP address" due to overzealous egress firewall rules that everyone thought was good engineering practice 20 years ago.