Good post.
Perhaps you should address how firewall can/should be blocking access incoming as well.
IN fact, most hardware firewalls do nothing in regard to outgoing connections. While many are...