Re: Port blocking last resort in fight against virus

In your world DoS traffic would be free to roam the networks as it pleased without being throttled sensibly at ingress?

Throttling is a different from blocking. Sensible traffic management does not break applications nor network transparency. You are free to choose when to forward each packet.

Or the dumb [wannabee] IT guy runs some telnet/ftp/filesharing service without passwords and its ok for the whole world to access the private system coz its his fault?

This means your application security infrastructure already failed if some filesharing application is running on a machine which also has access to data in the internal disk shares. Pete