nanog mailing list archives

Re: What do you want your ISP to block today?


From: Johannes Ullrich <jullrich () euclidian com>
Date: Wed, 03 Sep 2003 14:33:20 -0400



I just summarized my thoughts on this topic here:
http://www.sans.org/rr/special/isp_blocking.php

Overall: I think there are some ports (135, 137, 139, 445),
a consumer ISP should block as close to the customer as
they can. 

One basic issue is that people discussing this topic on 
mailing lists like these are not average home users. Most
of us here have seen a DOS prompt at some point and know
about "Service Packs" and "Hotfixes".




-- 
--------------------------------------------------------------
Johannes Ullrich                     jullrich () euclidian com
pgp key: http://johannes.homepc.org/PGPKEYS
--------------------------------------------------------------
   "We regret to inform you that we do not enable any of the 
    security functions within the routers that we install."
         support () covad net
--------------------------------------------------------------



Current thread: