Re: zotob - blocking tcp/445

["Sane Jiri" <Jiri.Sane () elisa fi>]

Randy,

> though http://www.rommon.com/sandbox.html looks to be a
> commercial product (and hence the spawn of evil:-), has
> anyone got success/failure stories?  it looks to speak
> directly to this issue.

We have been using rommon for years now and are quite happy with it. It
has radically decreased workload of our abuse-handling crew and
zotob-infected customers for example got blocked with no extra
configuration needed.

-- 
Jiri Sane
Elisa Oy (Ltd)
Puh. 010 266 2012
jiri.sane () elisa fi