> People should have to authorise each device for each type of traffic. Seems somewhat unreasonable to expect people to know what traffic a device needs, and i

> People should have to authorise each device for each type of traffic. Seems somewhat unreasonable to expect people to know what traffic a device needs, and if you ask too much, people will just default to allowing it without even thinking about it (I still occasionally see people suggesting using a DMZ to make online games work, rather than forwarding the necessary ports [and even that seems rarely required]).