[60424] in North American Network Operators' Group
RE: RPC errors
daemon@ATHENA.MIT.EDU (Dan Hollis)
Tue Aug 12 05:10:10 2003
Date: Tue, 12 Aug 2003 02:09:18 -0700 (PDT)
From: Dan Hollis <goemon@anime.net>
To: Sean Crandall <sean@megapath.net>
Cc: "'nanog@merit.edu'" <nanog@merit.edu>
In-Reply-To: <7890E58494115C4C8D864A0E1211D5AA071321D0@ALPINE>
Errors-To: owner-nanog-outgoing@merit.edu
On Mon, 11 Aug 2003, Sean Crandall wrote:
> This worm is amazing. I have only had filters in place for about 4.5 hours
> and I am already approaching 100 million matches for the deny tcp/135 across
> my network. Of that, only one customer has said that they needed 135 open
> for legimate use (probably more, but I have only heard from the one).
Isnt this a perfect situation for a 135/tcp tarpit?
-Dan
--
[-] Omae no subete no kichi wa ore no mono da. [-]
