"And if you start from 'permit nothing,' how many messages are consumers going to have to deal with?"
Microsoft's not totally abandoning consumers on the Vista firewall issue. Inbound filtering, for instance, will be managed much like in Windows XP, said the company's spokesperson.
But if users choose to turn on outbound filtering in Vista, they'll have to rely on "outbound filtering rules that are enabled by default for core Windows services as part of Windows Service Hardening," said the spokesperson.
Windows System Hardening is Microsoft's nomenclature for a Vista feature that restricts critical Windows services from making abnormal changes to the file system, Windows registry, or network, such as the kind of modifications made by malware to install, or once installed, to attack other PCs.
Microsoft also plans to integrate Vista's two-way firewall with Windows Live OneCare, the separate by-subscription security service that launches in June, and which already adds outbound filtering to Windows XP.