My personal laptop, my servers, and my Linux-running home networking equipment are fairly resistant to attack. ;) It's true that the consumer electronics secur

My personal laptop, my servers, and my Linux-running home networking equipment are fairly resistant to attack. ;) It's true that the consumer electronics security situation is a sad joke, but PCs have generally been becoming harder targets for quite some time now. > ...or that it can use your network to get anybody else. I assume that by this you mean "Can't use your Internet link to launch attacks against other networks."? If you do, then it is my somewhat-informed opinion that maintaining a default-deny policy for outbound communication on a home LAN is far too much trouble than it's worth. I suspect that -on most home LANs- you could probably get away with denying all outbound TCP other than to port 80 and 443, and allowing all outbound UDP. [0] However, if your attacker is somewhat determined and even a little bit clever, he will use the Universal Firewall Bypass Protocol [1] to talk to his C&C system(s) or other malicious devices or whatever. In this situation, you will have spent more than 0 minutes on managing your firewall rules and gained nothing from the work. [0] So that most multiplayer video games, and Bittorrent-over-UDP work just fine. [1] That is, HTTP(S).