Re: zotob - blocking tcp/445

[Randy Bush <randy () psg com>]

> > > I'm not nearly confident enough to decide on behalf of almost
> > > billion other people how they should benefit from the Internet
> > > and how not to.
> > thanks for that!
> Indeed.  Also see
> http://www.iab.org/documents/docs/2003-10-18-edge-filters.html

as i just replied to a private message from an enterprise op,

  o backbone isps can not set their customers' security policy
    - some customers want to run billyware shares over the wan
      whether we advise it or not
    - some of us host security researchers, who have a taste
      for 445 and other nasty traffic

  o enterprise / site ops can set their users' security policies
    as that's part of their job and charter

randy