Full Disclosure mailing list archives

Re: Proposal: how to notify owners of compromised PC's


From: Phil Brutsche <phil () tux obix com>
Date: Thu, 29 Jan 2004 02:31:15 -0600

petard wrote:

This is in fact our preferred mode of operation at example.com, as it
allows maximum client interoperability, or did anyway... It was
our only mode of operation at that time. When this happened with my ISP,
unannounced,

Lemme guess... Cox Cable?

At any rate, blocking port 25 is a half-assed solution to a problem that
needs to be solved at the MUA, not the MTA or MSA.

Someone's irresponsible use of their MUA is not the only problem. Blocking outbound TCP port 25 stops a virus/worm and spam problem that's caused by more than just crap like the Mydoom variants.

It may be "half-assed" but it's easier and more effective than getting you-know-who to fix their sorry excuses for mail clients and/or getting end users to not be such morons.

--

Phil Brutsche
phil () tux obix com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: