3 ms·
> depends enormously on other people's behavior. The disappointment is there seems to be no difference between "needing a single open port" and "needing and en
by akira2501 2y ago
> depends enormously on other people's behavior.
The disappointment is there seems to be no difference between "needing a single open port" and "needing and entire IP address" due to overzealous egress firewall rules that everyone thought was good engineering practice 20 years ago.
- the8472 2y agoI wish it were just some old boxen from 20 years ago. $employer STILL does port-based firewalling and thinks it's great policy. Just getting SSH to github requires requesting an exemption. edit: spelling
- frutiger 2y ago> some old boxens Aside: in this vernacular, plural of ox is oxen; plural of box is boxen. “boxens” is never appropriate.
- akira2501 2y agoDNS SRV. So much promise. Ultimately just became "I know where exchange is!"
- mschuster91 2y ago> $employer STILL does port-based firewalling and thinks it's great policy. And they're not wrong either, it by definition disables not just a whole class of (admittedly outdated) communication channels for malware (such as IRC), but also other stuff you don't want to happen on your network either: bittorrent, people running online games during work...