zotob - blocking tcp/445

Saku Ytti saku+nanog at ytti.fi
Mon Aug 15 19:22:10 UTC 2005


On (2005-08-15 18:51 +0000), surfer at mauigateway.com wrote:

> NetBIOS was never meant to be a WAN protocol, so no problem
> in blocking it.

 I'm not nearly confident enough to decide on behalf of almost
billion other people how they should benefit from the Internet
and how not to.
 There are real solutions to the problem, which include monitoring
the end-user traffic and do traffic steering for infected hosts 
to a web page thats helps solving their problem.

> For example:  grc.com/su-techzone1.htm
> 
> scott
> 
> ----- Original Message Follows -----
> From: Gadi Evron <ge at linuxbox.org>
> To: nanog list <nanog at merit.edu>
> Subject: zotob - blocking tcp/445
> Date: Mon, 15 Aug 2005 21:51:43 +0200
> > I heard from several different big ISP's that to stop the
> > spread of the  worm they now block tcp/445. I suppose it
> > works.
> > 
> >     Gadi.
> 

-- 
  ++ytti



More information about the NANOG mailing list