On Sun, Jan 4, 2015 at 6:32 PM, Kevin Kofler  wrote:
Björn Persson wrote:
> I bet! I worry that the questions would quickly become annoying. But if
> ports are going to be blocked by default, then there needs to be some
> way for non-sysadmin users to open them.

No, why? The ports just need to be closed, period. Non-sysadmin users
shouldn't be allowed to open any ports.

That won't work in a world where users *are* the sysadmins as well.  Even in a small business where one has a sysadmin, they aren't focused on internal issues all that much.  Users are expected to cope up.