I get asked quite often to take a look at the ip filtering rules that people have. One of the interesting things I noticed is that in many cases where people run a public DNS, they have an ip filter installed and use state keeping for DNS requests. I believe that the filter is a good idea, but the state keeping is not in this specific case.

This is a short rant about something that has been annoying me for years now. 'Security experts' often argue that security is not a product but a process. While I agree with the intention here, I disagree with the saying.