nanog mailing list archives

Re: Filter NTP traffic by packet size?


From: Brandon Galbraith <brandon.galbraith () gmail com>
Date: Wed, 26 Feb 2014 11:44:55 -0600

On Wed, Feb 26, 2014 at 6:56 AM, Keegan Holley <no.spam () comcast net> wrote:
More politely stated, it’s not the responsibility of the operator to
decide what belongs on the network and what doesn’t.  Users can run any
services that’s not illegal or even reuse ports for other applications.
 That being said commonly exploited ports (TCP 25 for example) are often
blocked.  This is usually done to block or protect an application though
not to single out a particular port number.

Don't most residential ISPs already block port 25 outbound?
http://www.postcastserver.com/help/Port_25_Blocking.aspx

Blocking chargen at the edge doesn't seem to be outside of the realm of
possibilities.


Current thread: