nanog mailing list archives
Re: short Botnet list and Cashing in on DoS
From: Bill Stewart <nonobvious () gmail com>
Date: Mon, 11 Oct 2004 10:52:45 -0700
On Sun, 10 Oct 2004 15:06:17 -0400, James Baldwin <jbaldwin () antinode net> wrote:
Pardon for my possibly ill informed interjection. I was under the impression that the current wind was blowing towards filtering outbound port 25 traffic while allowing outbound authenticated port 587 traffic? The though being that while this was not a FUSSP, it help to prevent unauthenticated "direct to mx" abuses.
Well, the wind blows where it wants... 587 and its relatives are useful for enterprise firewall penetration as well as for environments where ISPs incorrectly block port 25, and they make it possible to do SPF and similar sender-ID protocols in those environments (which are otherwise awkward.) For an ISP, you don't just "allow" 587 - the normal definition of Internet service is to allow everything unless there's a good reason not to, as opposed to deny-most firewalls. We've had the "blocking port 25" discussion too many times before, and I'll second Paul Vixie's call to go implement BCP38 first. ---- Thanks; Bill Note that this isn't my regular email account - It's still experimental so far. And Google probably logs and indexes everything you send it.
Current thread:
- Re: short Botnet list and Cashing in on DoS, (continued)
- Re: short Botnet list and Cashing in on DoS Gadi Evron (Oct 09)
- Re: short Botnet list and Cashing in on DoS Alexei Roudnev (Oct 09)
- Re: [nanog] Re: short Botnet list and Cashing in on DoS Dan Mahoney, System Admin (Oct 09)
- Re: [nanog] Re: short Botnet list and Cashing in on DoS Randy Bush (Oct 09)
- Re: [nanog] Re: short Botnet list and Cashing in on DoS Alexei Roudnev (Oct 10)
- Re: short Botnet list and Cashing in on DoS Mark Andrews (Oct 10)
- Re: short Botnet list and Cashing in on DoS James Baldwin (Oct 10)
- Re: short Botnet list and Cashing in on DoS Alexei Roudnev (Oct 10)
- BCP38 making it work, solving problems Sean Donelan (Oct 10)
- Re: BCP38 making it work, solving problems Edward B. Dreger (Oct 11)
- Re: short Botnet list and Cashing in on DoS Bill Stewart (Oct 11)
- Re: short Botnet list and Cashing in on DoS Edward B. Dreger (Oct 11)
- Re: short Botnet list and Cashing in on DoS David Lesher (Oct 09)
- Re: short Botnet list and Cashing in on DoS Stephen J. Wilcox (Oct 09)
- Re: short Botnet list and Cashing in on DoS Gadi Evron (Oct 09)
- Re: short Botnet list and Cashing in on DoS Stephen J. Wilcox (Oct 09)
- Re: short Botnet list and Cashing in on DoS Paul Vixie (Oct 09)
- Re: short Botnet list and Cashing in on DoS Alexei Roudnev (Oct 09)
- Re: short Botnet list and Cashing in on DoS Petri Helenius (Oct 09)
- Re: short Botnet list and Cashing in on DoS Michael . Dillon (Oct 11)