This is the correct answer. Unless you're just wanting to learn networking. Blocking outbound on shit that doesn't need it, and having a dmz if you're really really wanting to host outside of your environment is the best way. If someone is in your environment, vlans aren't going to stop them.
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments