Firewall Wizards mailing list archives
Re: worm?
From: "Steven M. Bellovin" <smb () cs columbia edu>
Date: Fri, 2 Feb 2007 08:29:22 +0000
On Thu, 1 Feb 2007 18:17:54 -0500 (EST) "Paul D. Robertson" <paul () compuwar net> wrote:
On Thu, 1 Feb 2007, Brian Loe wrote:Fortunately we have managed to configure enough security that we disallow outgoing connections to port 25.Hopefully tcp/6667 as well.
Or use something like NetFlow to find out what other connections are
coming from/going to that machine.
--Steve Bellovin, http://www.cs.columbia.edu/~smb
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards