Re: IRC policies

[Gary Flynn <flynngn () JMU EDU>]

Knowles, Richard N. CISSP PMP wrote:
> Are there any schools that are blocking IRC to curb ‘bot activity?

We've blocked ports 6665-6670 outbound from the student network since
2003 without problems. We've had one or two requests for an exception.
Other than that, no.

I've noticed several good ideas about monitoring aberrant behavior
in the responses that were generated by your question that we'll
look into. It seems like most of the BOTS we see don't use the
default IRC port anyway though that may be because we only see
those. :)


-
Gary Flynn
Security Engineer
James Madison University
www.jmu.edu/computing/security

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature