Even better: fix your damn security. The security standard we use for everything in our network is: if it would be insecure if hooked directly up to the Intern

Even better: fix your damn security. The security standard we use for everything in our network is: if it would be insecure if hooked directly up to the Internet, it is broken. Firewalls encourage poor security by creating a false sense of security and leading to developer and system administrator complacency. IMHO it would be better to get rid of them and let the insecure junk burn. To prevent DDOS exploitation the best would be to have grey hats take the latest exploits and mass-brick exploitable devices. We'd learn our lesson and then we'd have secure devices.