Full Disclosure mailing list archives
RE: Learn from history?
From: "Serge van Ginderachter (svgn)" <svgn () orbid be>
Date: Thu, 6 May 2004 15:30:05 +0200
If wormX propogates using port Y, block any traffic with source/destination port Y.
Exactly. Note that those ports probably should have been blocked already. Hen they are open, they should be open for servers/services that REALLY needed them only and only if it's safe to do it. Now that might probably have been the case on the border, but not on the local LAN... (which was my initial intended remark)
It doesn't solve the problem, it slows the spreading. If you get infected, we don't need to you spread it further. Block the shit from going outbound.
Totally agree, but IRL... do you have any idea how much small businesses have just a NAT router instead of a real firewall? Serge _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- RE: Learn from history?, (continued)
- RE: Learn from history? full-disclosure (May 05)
- RE: Learn from history? Stuart Fox (DSL AK) (May 05)
- RE: Learn from history? Alerta Redsegura (May 05)
- RE: Learn from history? Stuart Fox (DSL AK) (May 05)
- Re: Learn from history? Ondrej Krajicek (May 06)
- RE: Learn from history? Serge van Ginderachter (svgn) (May 06)
- RE: Learn from history? Alerta Redsegura (May 06)
- RE: Learn from history? Ferris, Robin (May 06)
- RE: Learn from history? Alerta Redsegura (May 06)
- RE: Learn from history? Steve Bremer (May 06)
- RE: Learn from history? Serge van Ginderachter (svgn) (May 06)
- RE: Learn from history? full-disclosure (May 06)
- RE: Learn from history? Serge van Ginderachter (svgn) (May 06)
- RE: Learn from history? Serge van Ginderachter (svgn) (May 06)
- RE: Learn from history? Ng, Kenneth (US) (May 10)
- RE: Learn from history? Alerta Redsegura (May 10)
- RE: Learn from history? Michal Zalewski (May 10)
- RE: Learn from history? Alerta Redsegura (May 10)
- RE: Learn from history? Gwendolynn ferch Elydyr (May 10)
- Re: Learn from history? Calum (May 11)
- RE: Learn from history? Ron DuFresne (May 11)
- RE: Learn from history? Alerta Redsegura (May 10)