[61464] in North American Network Operators' Group
Re: Dealing with infected users (Re: ICMP traffic increasing on
daemon@ATHENA.MIT.EDU (Petri Helenius)
Fri Aug 29 02:55:49 2003
Date: Fri, 29 Aug 2003 09:55:10 +0300
From: Petri Helenius <pete@he.iki.fi>
To: Vadim Antonov <avg@kotovnik.com>
Cc: Mike Tancsa <mike@sentex.net>, nanog@merit.edu
In-Reply-To: <Pine.LNX.4.21.0308281504390.10714-100000@gato.kotovnik.com>
Errors-To: owner-nanog-outgoing@merit.edu
Vadim Antonov wrote:
>It should be pointed put that the ISPs have their share of blame for the
>quick-spreading worms, beause they neglected very simple precautions --
>such as giving cutomers pre-configured routers or DSL/cable modems with
>firewalls disabled by default (instead of the standard "end-user, let only
>outgoing connections thru" configuration), and providing insufficient
>information to end-users on configuring these firewalls.
>
>
>
And you´re willing to pay all the helpdesk persons helping these people
to adjust their
configurations to accommodate for KaZaa, BitTorrent, Quake3, Counter
Strike, etc?
It would be much easier and more centralized if the networking
interfaces in operating systems
would not expose services by default. But were already went there.
Pete