[80734] in North American Network Operators' Group
Re: Blocking port udp/tcp 1433/1434
daemon@ATHENA.MIT.EDU (Gadi Evron)
Wed May 11 12:57:44 2005
Date: Wed, 11 May 2005 19:54:11 +0400
From: Gadi Evron <ge@linuxbox.org>
To: Jeff Rosowski <rosowskij@ie.ymp.gov>
Cc: Joe Maimon <jmaimon@ttec.com>, nanog@nanog.org
In-Reply-To: <20050511093810.P80587@infeng.ymp.gov>
Errors-To: owner-nanog@merit.edu
Jeff Rosowski wrote:
>
>> Is there still justification for denying transit for ms-sql slammer
>> ports?
>
>
> Well MS-SQL Worm propagation attempts and MS-SQL version overflow
> attempts account for 62% of the activity on our Internet facing IDS.
It changes from 40% to 70% here at AS8867, as well.
Gadi.