[83444] in North American Network Operators' Group
Re: zotob - blocking tcp/445
daemon@ATHENA.MIT.EDU (Randy Bush)
Mon Aug 15 16:52:10 2005
From: Randy Bush <randy@psg.com>
Date: Mon, 15 Aug 2005 10:46:43 -1000
To: "Steven M. Bellovin" <smb@cs.columbia.edu>
Cc: Saku Ytti <saku+nanog@ytti.fi>, nanog list <nanog@merit.edu>
Errors-To: owner-nanog@merit.edu
>>> I'm not nearly confident enough to decide on behalf of almost
>>> billion other people how they should benefit from the Internet
>>> and how not to.
>> thanks for that!
> Indeed. Also see
> http://www.iab.org/documents/docs/2003-10-18-edge-filters.html
as i just replied to a private message from an enterprise op,
o backbone isps can not set their customers' security policy
- some customers want to run billyware shares over the wan
whether we advise it or not
- some of us host security researchers, who have a taste
for 445 and other nasty traffic
o enterprise / site ops can set their users' security policies
as that's part of their job and charter
randy
