nanog mailing list archives

Re: Quarantining infected hosts (Was: FBI tells the public to call their ISP for help)


From: "Suresh Ramasubramanian" <ops.lists () gmail com>
Date: Mon, 18 Jun 2007 20:12:15 +0530


On 6/18/07, Jeroen Massar <jeroen () unfix org> wrote:
Of course, though 25 is (afaik ;) the most abused one that will annoy a
lot of other folks with spam, phishings and virus distribution, though
the latter seems to have come to a near halt from what I see.

Read these and weep, then -
http://darkwing.uoregon.edu/~joe/port25.pdf
http://darkwing.uoregon.edu/~joe/zombies.pdf

As Joe says (and I agree), trying to fix infected hosts on your
network by blocking port 25 is like treating lung cancer with cough
syrup.

srs
--
Suresh Ramasubramanian (ops.lists () gmail com)


Current thread: