If a developer or vendor cannot tell you what ports and protocols their software uses it is time to re-evaluate how much you need their software.
In most companies of any size that I have been involved with an application portfolio would need to list the ports and services that it would use.
You could also turn off the firewall, run nmap against the system and see what ports are open. Ask the developers what their application uses from the ports discovered and then turn the firewall on again. Then block what you don't need and open what you do. Yeah, it's a pain in the ass, but not every machine inside your network is always going to play nice with everyone else, so firewalls on important systems are needed.
VPN to an admin workstation in the DMZ. That admin workstation will of course be on the access list.
Or you could run a virtual firewall (running an Open VPN client to your main firewall) and admin station inside your laptop and tunnel from your workstation to your firewall.
There are a ton of ways to do this depending on the time and options you have access to.
Firewall. Whitelist. Limit access to SSH to systems on the whitelist.
No need to block entire countries - just allow SSH access to those systems that need it.
Now, if you want to talk about blocking access to your web or mail server from anyone in East Elbonia, then you can implement a package like Country Block, or use a service like this one, depending on your firewall.
The lesson from this? Restrict access to important services via a whitelist, block access to public services with a deny list.
I also lay aside all ideas of any new works or engines of war, the invention of which long-ago reached its limit, and in which I see no hope for further improvement... - Sextus Julius Frontinus, governor of Britania, 84 C.E.
Mathematics is inadequate to describe the universe, since mathematics is an abstraction from natural phenomena. Also, mathematics may predict things which don't exist, or are impossible in nature.
- Ludovico delle Colombe
The abolishment of pain in surgery is a chimera. It is absurd to go on seeking it... Knife and pain are two words in surgery that must forever be associated in the consciousness of the patient.
- Dr. Alfred Velpeau
When the Paris Exhibition closes electric light will close with it and no more be heard of.
- Erasmus Wilson
This `telephone' has too many shortcomings to be seriously considered as a practical form of communication. The device is inherently of no value to us.
- Western Union internal memo, 1878
Rail travel at high speed is not possible because passengers, unable to breathe, would die of asphyxia.
- Dr. Dionysus Lardner
That the automobile has practically reached the limit of its development is suggested by the fact that during the past year no improvements of a radical nature have been introduced.
- Scientific American, Jan. 2, 1909.
There is not the slightest indication that nuclear energy will ever be obtainable. It would mean that the atom would have to be shattered at will.
- Albert Einstein
Heavier-than-air flying machines are impossible.
- Lord Kelvin, 1895
There is no reason for any individual to have a computer in their home.
- Kenneth Olsen, president and founder of Digital Equipment Corp
Apples and oranges - there is a difference between killing those that you are certain beyond any doubt are trying to kill you and killing those that you are sure only beyond a reasonable doubt killed someone else.
I too would prefer the guilty walk free over the innocent being condemned to death. This has nothing to do with the crime, but rather the punishment. I would rather imprison every convicted murderer for life rather than execute one innocent person.
"Many that live deserve death. And some that die deserve life. Can you give it to them? Then do not be too eager to deal out death in judgement. For even the very wise cannot see all ends." - Gandalf, The Lord of The Rings
February 2014 was the 21st warmest February on record since 1880. The temperature was yet again above the 20th century average, for the 348th consecutive month. That is every month above the 20th century average for the last 29 years.
Please, tell me just how you determined the temperature is going down?
That "Obamafone" program that you are referring to was actually started during the Reagan Administration. Kinda hard for something that happened in the nineties to predate that...
I hereby sell my soul to Satan for a bag (let's be specific here - biggest size currently available, not a snack size) of Cheetos. Also included in this deal are the souls of everyone in my family.
The first person to write it down - in other words, history is told by those that wrote the book - is the "Discoverer", because when people two hundred years later wonder who 'discovered" this place, they go look in a book.
Like in any relationship, thing are always changing. One partner moves a little further away, the other becomes disinterested and soon one of them just doesn't understand the other.
I regularly shop at three different supermarkets, one of which is Whole Foods. I like their produce. I like Publix for bulk goods like pasta and flour and TP. I like The Fresh Market for their fish and meat. I can separate the pseudo science at any one of these from the products I am buying. I only worry about price and quality of what I am buying, not the hype that surrounds it.
The Creation Museum does not sell me anything useful. The hype surrounding their "product" is exactly what they are trying to sell and I am not buying any of it.
At Whole Foods I can buy an orange without buying a belief system. At the Creation Museum, the apples come with a whole set of beliefs attached to them.
I am certainly no fan of Castro's, but I do not blindly hate the man and froth at the mouth every time his name is mentioned. While I do not think it is worth anywhere near the price the people have paid, there are some things that Cuba does get right.
The U.S.. and a bunch of exiles still pissed about losing their wealth...
When Pope John Paul II visited Cuba in 1988, he and Fidel Castro went on a boat tour of the harbor in Havana. About half way through the tour, the boat sank. Fidel picked up the pope and carried him back to shore, walking on the water the entire way.
The next day, the newspaper headline in Tribuna de La Habana read "Castro Displays Superiority of Socialist Man".
The newspaper headline in L'Osservatore Romano read "Pope Helps Fidel Perform Miracle".
The newspaper headline in the Miami Herald read "Fidel: Can't Even Swim".
And in the end, what does that get you? What do you "Win"? When you are dead and gone, what difference will any of it make?
The world today sees "enemies" in far too many places. Our enemies are across the field in a football stadium, applying for the same job we want, working at a competing company, immigrating to our towns or just members of a different political party.
And the truth is that real enemies, those that want to see you dead, benefit from you seeing everyone as an enemy. When you see most everyone as an enemy you have far fewer friends. You fail to see what that you have far more in common with your perceived enemy than those things that make you see a Democrat or Republican or Libertarian as an enemy.
The truth is that there is a difference between an enemy and an opponent, between those that want to destroy you and those that you will have to live with and cooperate with once the football game, job interview, work day, naturalization ceremony or political campaign is over. This country was founded on the idea that we could disagree, put it to a vote and still live peaceably with each other once the decision has been made.
Stop acting surprised if one party or another engages in devious activity to reach that goal. It's been happening for thousands of years. It's never going to stop.
No one is really surprised by this, but we can be disappointed. And we can demand better, that those that want our votes show us that they can be trusted to act in a decent and ethical manner most of the time. We can't expect perfection but we can ask that the ultimate object in politics is to govern well and honorably.
...that's going to leave many readers unable to buy DRMed ebooks.
Oh no, it won't. They'll be able to buy all the DRMed books they want, just with the new DRM. And they'll have to, because they won't be able to use the old ones they purchased from a company that no longer exists.
Do you think this isn't what they had in mind? You insisted on buying a copy instead of a license to use the content for a set time, so the publishers have found a way to make you pay again...
Slashdot Mirror
In most companies of any size that I have been involved with an application portfolio would need to list the ports and services that it would use.
You could also turn off the firewall, run nmap against the system and see what ports are open. Ask the developers what their application uses from the ports discovered and then turn the firewall on again. Then block what you don't need and open what you do. Yeah, it's a pain in the ass, but not every machine inside your network is always going to play nice with everyone else, so firewalls on important systems are needed.
Wonder where I can get a firmware upgrade?
Or you could run a virtual firewall (running an Open VPN client to your main firewall) and admin station inside your laptop and tunnel from your workstation to your firewall.
There are a ton of ways to do this depending on the time and options you have access to.
No need to block entire countries - just allow SSH access to those systems that need it.
Now, if you want to talk about blocking access to your web or mail server from anyone in East Elbonia, then you can implement a package like Country Block, or use a service like this one, depending on your firewall.
The lesson from this? Restrict access to important services via a whitelist, block access to public services with a deny list.
I wonder if any of these farmer-sailors were growing spinach and eating olive oil...
Mathematics is inadequate to describe the universe, since mathematics is an abstraction from natural phenomena. Also, mathematics may predict things which don't exist, or are impossible in nature. - Ludovico delle Colombe
The abolishment of pain in surgery is a chimera. It is absurd to go on seeking it... Knife and pain are two words in surgery that must forever be associated in the consciousness of the patient. - Dr. Alfred Velpeau
When the Paris Exhibition closes electric light will close with it and no more be heard of. - Erasmus Wilson
This `telephone' has too many shortcomings to be seriously considered as a practical form of communication. The device is inherently of no value to us. - Western Union internal memo, 1878
Rail travel at high speed is not possible because passengers, unable to breathe, would die of asphyxia. - Dr. Dionysus Lardner
That the automobile has practically reached the limit of its development is suggested by the fact that during the past year no improvements of a radical nature have been introduced. - Scientific American, Jan. 2, 1909.
There is not the slightest indication that nuclear energy will ever be obtainable. It would mean that the atom would have to be shattered at will. - Albert Einstein
Heavier-than-air flying machines are impossible. - Lord Kelvin, 1895
There is no reason for any individual to have a computer in their home. - Kenneth Olsen, president and founder of Digital Equipment Corp
Now Skynet has bombers!
If you can, watch The Inner Light. It is about the only episode of ST:TNG I will watch whenever it is available.
Apples and oranges - there is a difference between killing those that you are certain beyond any doubt are trying to kill you and killing those that you are sure only beyond a reasonable doubt killed someone else.
I too would prefer the guilty walk free over the innocent being condemned to death. This has nothing to do with the crime, but rather the punishment. I would rather imprison every convicted murderer for life rather than execute one innocent person.
"Many that live deserve death. And some that die deserve life. Can you give it to them? Then do not be too eager to deal out death in judgement. For even the very wise cannot see all ends." - Gandalf, The Lord of The Rings
February 2014 was the 21st warmest February on record since 1880. The temperature was yet again above the 20th century average, for the 348th consecutive month. That is every month above the 20th century average for the last 29 years. Please, tell me just how you determined the temperature is going down?
Yes, there is.
Alex, what is "Lack of sufficient free oxygen to react with"?
That "Obamafone" program that you are referring to was actually started during the Reagan Administration. Kinda hard for something that happened in the nineties to predate that...
I hereby sell my soul to Satan for a bag (let's be specific here - biggest size currently available, not a snack size) of Cheetos. Also included in this deal are the souls of everyone in my family.
Now let's see if my fingers turn orange...
The first person to write it down - in other words, history is told by those that wrote the book - is the "Discoverer", because when people two hundred years later wonder who 'discovered" this place, they go look in a book.
Like in any relationship, thing are always changing. One partner moves a little further away, the other becomes disinterested and soon one of them just doesn't understand the other.
I would suggest couple's therapy.
The Creation Museum does not sell me anything useful. The hype surrounding their "product" is exactly what they are trying to sell and I am not buying any of it.
At Whole Foods I can buy an orange without buying a belief system. At the Creation Museum, the apples come with a whole set of beliefs attached to them.
Why are there so many sad love poems as opposed to happy ones? When you're happily in love there are better things to do than write poetry.
I suppose the same applies to Facebook postings - when you're happily in love, there's better things to do than write on someone's wall.
Look at this page from the CIA World Fact Book and look at the relative positions of the US and Cuba.
The U.S.. and a bunch of exiles still pissed about losing their wealth...
When Pope John Paul II visited Cuba in 1988, he and Fidel Castro went on a boat tour of the harbor in Havana. About half way through the tour, the boat sank. Fidel picked up the pope and carried him back to shore, walking on the water the entire way.
The next day, the newspaper headline in Tribuna de La Habana read "Castro Displays Superiority of Socialist Man".
The newspaper headline in L'Osservatore Romano read "Pope Helps Fidel Perform Miracle".
The newspaper headline in the Miami Herald read "Fidel: Can't Even Swim".
It's an LED star, not an incandescent...
The Myth of Guns and the Libertarian Wild West
The ultimate object in politics is to WIN.
And in the end, what does that get you? What do you "Win"? When you are dead and gone, what difference will any of it make?
The world today sees "enemies" in far too many places. Our enemies are across the field in a football stadium, applying for the same job we want, working at a competing company, immigrating to our towns or just members of a different political party.
And the truth is that real enemies, those that want to see you dead, benefit from you seeing everyone as an enemy. When you see most everyone as an enemy you have far fewer friends. You fail to see what that you have far more in common with your perceived enemy than those things that make you see a Democrat or Republican or Libertarian as an enemy.
The truth is that there is a difference between an enemy and an opponent, between those that want to destroy you and those that you will have to live with and cooperate with once the football game, job interview, work day, naturalization ceremony or political campaign is over. This country was founded on the idea that we could disagree, put it to a vote and still live peaceably with each other once the decision has been made.
Stop acting surprised if one party or another engages in devious activity to reach that goal. It's been happening for thousands of years. It's never going to stop.
No one is really surprised by this, but we can be disappointed. And we can demand better, that those that want our votes show us that they can be trusted to act in a decent and ethical manner most of the time. We can't expect perfection but we can ask that the ultimate object in politics is to govern well and honorably.
...that's going to leave many readers unable to buy DRMed ebooks.
Oh no, it won't. They'll be able to buy all the DRMed books they want, just with the new DRM. And they'll have to, because they won't be able to use the old ones they purchased from a company that no longer exists. Do you think this isn't what they had in mind? You insisted on buying a copy instead of a license to use the content for a set time, so the publishers have found a way to make you pay again...