Quarantining infected hosts (Was: FBI tells the public to call their ISP for help)

Mon Jun 18 14:42:15 UTC 2007

On 6/18/07, Jeroen Massar <jeroen at unfix.org> wrote:
> Of course, though 25 is (afaik ;) the most abused one that will annoy a
> lot of other folks with spam, phishings and virus distribution, though
> the latter seems to have come to a near halt from what I see.

Read these and weep, then -
http://darkwing.uoregon.edu/~joe/port25.pdf
http://darkwing.uoregon.edu/~joe/zombies.pdf

As Joe says (and I agree), trying to fix infected hosts on your
network by blocking port 25 is like treating lung cancer with cough
syrup.

srs
-- 
Suresh Ramasubramanian (ops.lists at gmail.com)