Home page logo

nanog logo nanog mailing list archives

Re: Port blocking last resort in fight against virus
From: "Petri Helenius" <pete () he iki fi>
Date: Wed, 13 Aug 2003 12:33:47 +0300

In your world DoS traffic would be free to roam the networks as it pleased 
without being throttled sensibly at ingress?

Throttling is a different from blocking. Sensible traffic management does not 
break applications nor network transparency. You are free to choose when to
forward each packet. 

Or the dumb [wannabee] IT guy runs some telnet/ftp/filesharing service without
passwords and its ok for the whole world to access the private system coz its
his fault?

This means your application security infrastructure already failed if some filesharing
application is running on a machine which also has access to data in the internal
disk shares.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]