<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 10 Aug 2022, at 11:33 pm, Simon <<a href="mailto:linux@thehobsons.co.uk" class="">linux@thehobsons.co.uk</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class=""><blockquote type="cite" style="font-family: Helvetica; font-size: 24px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">If you have a modem/router and you are running an ipv4 network at home then any firewall within your network is totally without any value what so ever.<br class=""></blockquote><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 24px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 24px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">I disagree - (almost) totally.</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 24px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""></div></div></blockquote></div><br class=""><div class="">Actually I agree (I had not considered SOUP)</div><div class=""><br class=""></div><div class="">Stephens comment</div><div class=""><br class=""><blockquote type="cite" class="">I have a separate IoT subnet where I put all my untrusted devices.<br class="">That subnet has Internet access, but the only access it has to the<br class="">rest of my network is to the DNS and NTP servers - anything else is<br class="">blocked. The parts of my network that are trusted can talk to the IoT<br class="">subnet to access the devices as required. The WiFi SSID on the IoT<br class="">subnet is set up to disallow devices from talking to each other.</blockquote><br class=""></div><div class="">But I need to think, offhand I don't see the ubiquitous modem/router being flexible enough to achieve this.</div><div class=""><br class=""></div><div class="">James</div><span jsslot="" class=""><div class="fAwxxf D5gqpe" jscontroller="UYJibd" jsname="mNipWe" data-animation-enabled="true" data-audio-play-tts="false" data-language-code="" data-tts-client-name="" data-tts-string="" data-use-default-audio-speed="false" aria-label=" Listen " data-uti="1" role="button" tabindex="0" jsaction="rcuQ6b:npT2md;DiIjNc;xLXIyb:DGzHQ" data-ved="2ahUKEwjz3cOBs735AhW48DgGHbTmCLgQlfQBegQICxAJ"> <div class="brWULd"> <div jsname="qpYryf" class="g1baVc"> <div jsname="FJYLhd" class="KnZOyc"></div> <div class="fjnQw pkt1Wd"></div> <div jsname="m1xdOb" class="nIW5Sd pkt1Wd"></div> <div jsname="DFrD7b" class="byDyWd pkt1Wd"></div> </div> </div> </div></span></body></html>