-
Lol. Really? What is this magic you speak of?
My point is more that I've worked in IT infrastructure for over 15 years, have a way above average understanding of firewalls and networking but I also know the following
1) I don't have the time or discipline to make sure that my network hardware and ancillary services are patched to latest level.
2) I don't have the time or discipline to stay up to date on particular vulnerabilities relating to hardware and services on my network
3) I don't trust hardware manufacturers or service providers to stay ahead of attack vectors.My opinion is heavily skewed by the fact that I have been a deliberate target for hacking over the last 7 years and sometimes have items of value that attract attention on my networks but even if that wasn't the case and I had nothing to protect, my three points would still stand.
This is why I prefer to keep my internal network internal only and limit what I have to pay attention to.
Any port that is open is an attack vector.
I have no idea how real the risk is in reality, but i'm particularly risk averse.