3 ms·

I don't want to run a border firewall on my home network, because I am not devops, neither is my mother, who also has a home network, etc. The former sound lik

I don't want to run a border firewall on my home network, because I am not devops, neither is my mother, who also has a home network, etc. The former sound like a management problem. One call from up above and access will appear.

lxgr 3y ago
> I don't want to run a border firewall on my home network If you're running a NAT, you're already running something much more complex than that. It's not rocket science for CPE manufacturers to make "outbound connections only" the default. My home router does just that.
- djha-skin 3y ago
  More of the same with this situation. A bunch of client developers telling me how to do my job. It's such a huge risk to show people what is in my network. It's such a huge risk to the business. It makes no sense to It makes no sense to reveal that. But I suppose telling you is not worth anyone's time, you're just going to say you like it better because you're a mobile developer.
  - lxgr 3y ago
    I'm responding to GP, not you, who mentioned their home network, not your business network. > you're just going to say you like it better because you're a mobile developer. Not sure what issues you have with mobile developers, but I'm not one, not that it should matter if the argument is sound.
yjftsjthsd-h 3y ago
> I don't want to run a border firewall on my home network, because I am not devops, Well... too bad? Do you want security or not? > neither is my mother, who also has a home network, etc. If your hypothetical non-technical mother just buys a normal off-the-shelf router (+AP+switch+...) then it'll already have a firewall by default. It's not like end-users are expected to design/implement these things themselves.
simoncion 3y ago
> I don't want to run a border firewall on my home network... NAT is provided by a stateful border firewall. Are you using NAT on your border device? Gratz, you're running a border firewall on your home network.
NewJazz 3y ago
One call from up above and access will appear. In my case, that worked... Sometimes. It really doesn't scale. At all.

lxgr 3y ago

> I don't want to run a border firewall on my home network If you're running a NAT, you're already running something much more complex than that. It's not rocket science for CPE manufacturers to make "outbound connections only" the default. My home router does just that.

djha-skin 3y ago
More of the same with this situation. A bunch of client developers telling me how to do my job. It's such a huge risk to show people what is in my network. It's such a huge risk to the business. It makes no sense to It makes no sense to reveal that. But I suppose telling you is not worth anyone's time, you're just going to say you like it better because you're a mobile developer.
- lxgr 3y ago
  I'm responding to GP, not you, who mentioned their home network, not your business network. > you're just going to say you like it better because you're a mobile developer. Not sure what issues you have with mobile developers, but I'm not one, not that it should matter if the argument is sound.

yjftsjthsd-h 3y ago

> I don't want to run a border firewall on my home network, because I am not devops, Well... too bad? Do you want security or not? > neither is my mother, who also has a home network, etc. If your hypothetical non-technical mother just buys a normal off-the-shelf router (+AP+switch+...) then it'll already have a firewall by default. It's not like end-users are expected to design/implement these things themselves.

simoncion 3y ago

> I don't want to run a border firewall on my home network... NAT is provided by a stateful border firewall. Are you using NAT on your border device? Gratz, you're running a border firewall on your home network.

NewJazz 3y ago

One call from up above and access will appear. In my case, that worked... Sometimes. It really doesn't scale. At all.