If the end-users really get public addresses for their WII and game-PCs,
do you really think they won't just open the box totally in their
firewall/router and catch/create even more problems?
You mean they don't already list as the DMZ address. 
WII's should be able to be directly connected to the network
without any firewall. If they can't be then they are broken.
[...]
WII's should be able to be directly connected to the network
without any firewall. If they can't be then they are broken.
Amen brother Mark! Can I get a hallelujah from the chorus?
(Meanwhile, I'll continue to leave my Wii outside of the trusted
MAC address pool in DHCP -- so it'll get an RFC-1918 address, rather
the a holy "true" IP.)
Mark Andrews wrote:
WII's should be able to be directly connected to the network
without any firewall. If they can't be then they are broken.
As I'm sure you know, you can tell the difference between an Internet evangelist and someone who mans the support lines by how they feel about "X should be able to be directly connected to the network without any firewall".
"...then they are broken" applied to 4.3 BSD-running VAXen and Sun 3's in 1988, and neither the frequency of attacks launched nor the number of exploitable bugs in network stacks or network-packet-ingesting application programs has gone down since then.
Matthew Kaufman