[69001] in North American Network Operators' Group
Re: UDP port 4000 traffic: likely a new worm
daemon@ATHENA.MIT.EDU (Scott Call)
Sat Mar 20 20:48:22 2004
Date: Sat, 20 Mar 2004 17:47:42 -0800 (PST)
From: Scott Call <scall@devolution.com>
To: <nanog@nanog.org>
In-Reply-To: <20040320190950.GA25230@homer.digitalwest.net>
Errors-To: owner-nanog-outgoing@merit.edu
Has anyone figured out the collateral damage if 4000/udp were to be
blocked for a couple of days? Since the exploit is in the ICQ code of
ISS's products, does blocking 4000/udp block ICQ as well?
Thanks
-S
--
Scott Call Router Geek, ATGi, home of $6.95 Prime Rib
I make the world a better place, I boycott Wal-Mart
VoIP incoming: +1 360-382-1814
