Educause Security Discussion mailing list archives

Re: Blubster Traffic


From: Ariel Silverstone <ariel.silverstone () TEMPLE EDU>
Date: Mon, 8 Sep 2003 09:16:49 -0400

How about blocking 225^4 on all your routers?

Thank you,

Ariel Silverstone
-----Original Message-----
From: The EDUCAUSE Security Discussion Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Piscitello, Frank
Sent: Saturday, September 06, 2003 9:00 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Blubster Traffic

So, our network is getting flooded with Blubster traffic.  It seems that
whenever a user does a search through Blubster, it connects via
UDP/41170 and scans local IPs and also hits 255.255.255.255.  The 255
traffic is killling the network.  Our Packeteer seems to be blocking
some of it, but not completely.

Any ideas?

------------------------------------------------------------------
Frank J. Piscitello, Jr.
Information Security Manager
Office of Information Security
Networking & Telecommunications
West Chester University of PA
West Chester, PA 19383

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.

Current thread: