RE: Worms versus Bots

Matthew Crocker wrote:
We require a NAT device or true firewall on all DSL
customer connections. We sell cheap Linksys boxes
to customers or they can upgrade to a SonicWall.

This makes a lot of sense to me. It's not a
silver bullet, but it does help.

I still like PPPoE for customer authentication
because I can place individual packet filters or
re-assign users to different contexts based on
username/password authentication. PPPoE/NAT is a
good combination.

Tends to be a non-issue now, but it's a lot easier to deal with PPPoE on
the Linksys than have the customer install a more or less crummy PPPoE
client on their PC. The cost of dealing with one customer that trashed
their PC installing an early PPPoE client (with the help of helpdesk :frowning:
is worth ten Linksys.