Marcus,

With regard to your observations on "default deny" access policies, most corporations have many times the number of hosts you described in your example - and clearly you're aware of this. Managing ACLs are cumbersome for even a small network.

In America, where I have experience, there...

[ more ]