Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!

[George William Herbert <gherbert () retro com>]

This is also being widely reported on the NANOG 
and inetproviders lists.  Check traffic outbound
from your MS SQL hosts if any.  Firewall 1434/UDP
inbound and outbound if you don't already.

Tier 1 backbones are reporting a bad night: routing
instabilities, one major dropped most of its peering
for a while, the volume from this triggers the Cisco
netflow switching bug and is causing routers to lock
up at places, etc.


-george william herbert
gherbert () retro com