I have just changed my BB ISP and have discovered that they provide a configurable firewall for basic vulneralbe ports. Not a complete solution but must be another layer remote to aid protection.