Quarantine your infected users spreading malware

Scott Weeks surfer at mauigateway.com
Mon Feb 20 22:17:44 UTC 2006


----- Original Message Follows -----
From: Gadi Evron <ge at linuxbox.org>

> Many ISP's who do care about issues such as worms,
> infected users  "spreading the love", etc. simply do not
> have the man-power to handle  all their infected users'
> population.

> Some who are user/broadband ISP's (not say, tier-1 and
> tier-2's who  would be against it: "don't be the
> Internet's Firewall") are blocking  ports such as 139 and
> 445 for a long time now, successfully preventing  many of
> their users from becoming infected. This is also an
> excellent  first step for responding to relevant outbreaks
> and halting their progress.
> 
> Philosophy aside, it works. It stops infections. Period.
> 
> Back to the philosophy, there are some other solutions as
> well. Plus,  should this even be done?



Oh geez, here we go again...  Search the archives and read
until you're content.  It's a non-thread.  This horse isn't
only dead, it's not even a grease spot on the road any more.
 :-(

scott







More information about the NANOG mailing list