[83439] in North American Network Operators' Group
Re: zotob - blocking tcp/445
daemon@ATHENA.MIT.EDU (Saku Ytti)
Mon Aug 15 15:22:46 2005
Date: Mon, 15 Aug 2005 22:22:10 +0300
From: Saku Ytti <saku+nanog@ytti.fi>
To: nanog list <nanog@merit.edu>
In-Reply-To: <4300e431.1b8.3e32.1309548120@mauigateway.com>
Errors-To: owner-nanog@merit.edu
On (2005-08-15 18:51 +0000), surfer@mauigateway.com wrote:
> NetBIOS was never meant to be a WAN protocol, so no problem
> in blocking it.
I'm not nearly confident enough to decide on behalf of almost
billion other people how they should benefit from the Internet
and how not to.
There are real solutions to the problem, which include monitoring
the end-user traffic and do traffic steering for infected hosts
to a web page thats helps solving their problem.
> For example: grc.com/su-techzone1.htm
>
> scott
>
> ----- Original Message Follows -----
> From: Gadi Evron <ge@linuxbox.org>
> To: nanog list <nanog@merit.edu>
> Subject: zotob - blocking tcp/445
> Date: Mon, 15 Aug 2005 21:51:43 +0200
> > I heard from several different big ISP's that to stop the
> > spread of the worm they now block tcp/445. I suppose it
> > works.
> >
> > Gadi.
>
--
++ytti
