RE: Blocking port 135?

Sean Donelan wrote: As someone else pointed out, if you want the ISP to provide you with a completely "safe" network you will end up with something like Minitel.

Note that the Minitel itself had many backdoors (not all of them being blocked by servers) and has not been safe for years; the issue is somehow comparable: The {app|minitel} has built-in vulnerabilities {crummy code|hidden control codes}. Those of us that participated in the early days of it still remember that when you wanted to get rid of someone in a chat room all you had to do was to private a message containing <esc>:f<ctrl-c><esc>9g Michel.