Port blocking last resort in fight against virus
Petri Helenius
pete at he.iki.fi
Wed Aug 13 09:33:47 UTC 2003
>
> In your world DoS traffic would be free to roam the networks as it pleased
> without being throttled sensibly at ingress?
>
Throttling is a different from blocking. Sensible traffic management does not
break applications nor network transparency. You are free to choose when to
forward each packet.
> Or the dumb [wannabee] IT guy runs some telnet/ftp/filesharing service without
> passwords and its ok for the whole world to access the private system coz its
> his fault?
>
This means your application security infrastructure already failed if some filesharing
application is running on a machine which also has access to data in the internal
disk shares.
Pete
More information about the NANOG
mailing list