the alternative is to put up with crackers abusing your insecure network for their own benefit