Full Disclosure mailing list archives

Re: RE: Windows Messenger Popup Spam on UDP Port 1026


From: Shawn McMahon <smcmahon () eiv com>
Date: Mon, 23 Jun 2003 10:58:56 -0400

On Sat, Jun 21, 2003 at 06:57:32PM +0100, Barry Dorrans said:

Why is it up to an ISP to block traffic?

Because the bandwidth hogged by some of the attacks that go on via
specific ports slows down the entire customer base.  This is especially
true for things like Code Red, which if it infects just a few of your
customers can result in your entire network bogging down into
unusability.  That's why Road Runner blocks port 80 inbound in some
areas.  The alternative is to cut off infected customers, and that's
labor-intensive and causes some of those customers to get angry and
refuse to pay instead of fixing their problem.

Anyway, your ISP probably doesn't guarantee you 100% inbound bandwidth
usage.  Most prohibit running "servers" on non-business accounts, so
being affected by these blocks implies violating terms of service.


-- 
Shawn McMahon     | Let every nation know, whether it wishes us well or ill,
EIV Consulting    | that we shall pay any price, bear any burden, meet any
UNIX and Linux    | hardship, support any friend, oppose any foe, to assure
http://www.eiv.com| the survival and the success of liberty. - JFK

Attachment: _bin
Description:


Current thread: