[97498] in North American Network Operators' Group
Re: Quarantining infected hosts (Was: FBI tells the public to call their ISP for help)
daemon@ATHENA.MIT.EDU (Suresh Ramasubramanian)
Mon Jun 18 10:43:10 2007
Date: Mon, 18 Jun 2007 20:12:15 +0530
From: "Suresh Ramasubramanian" <ops.lists@gmail.com>
To: "Jeroen Massar" <jeroen@unfix.org>
Cc: frnkblk@iname.com, "Sean Donelan" <sean@donelan.com>,
nanog@nanog.org
In-Reply-To: <46766F75.2020306@spaghetti.zurich.ibm.com>
Errors-To: owner-nanog@merit.edu
On 6/18/07, Jeroen Massar <jeroen@unfix.org> wrote:
> Of course, though 25 is (afaik ;) the most abused one that will annoy a
> lot of other folks with spam, phishings and virus distribution, though
> the latter seems to have come to a near halt from what I see.
Read these and weep, then -
http://darkwing.uoregon.edu/~joe/port25.pdf
http://darkwing.uoregon.edu/~joe/zombies.pdf
As Joe says (and I agree), trying to fix infected hosts on your
network by blocking port 25 is like treating lung cancer with cough
syrup.
srs
--
Suresh Ramasubramanian (ops.lists@gmail.com)
