Warnings
Like host security, start by blocking all communities and then open up to only what is needed
Kiddies, do not try this at home
You can make a mess at a distance which is very hard to debug
It is only useful in very special circumstances
So filter aggressively at the customer edge
Probably filter aggressively at small peer edge