RPC errors

Tue Aug 12 09:09:18 UTC 2003

On Mon, 11 Aug 2003, Sean Crandall wrote:
> This worm is amazing.  I have only had filters in place for about 4.5 hours
> and I am already approaching 100 million matches for the deny tcp/135 across
> my network.  Of that, only one customer has said that they needed 135 open
> for legimate use (probably more, but I have only heard from the one).

Isnt this a perfect situation for a 135/tcp tarpit?

-Dan
-- 
[-] Omae no subete no kichi wa ore no mono da. [-]