nanog mailing list archives

RE: RPC errors


From: Dan Hollis <goemon () anime net>
Date: Tue, 12 Aug 2003 02:09:18 -0700 (PDT)


On Mon, 11 Aug 2003, Sean Crandall wrote:
This worm is amazing.  I have only had filters in place for about 4.5 hours
and I am already approaching 100 million matches for the deny tcp/135 across
my network.  Of that, only one customer has said that they needed 135 open
for legimate use (probably more, but I have only heard from the one).

Isnt this a perfect situation for a 135/tcp tarpit?

-Dan
-- 
[-] Omae no subete no kichi wa ore no mono da. [-]


Current thread: