North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: RPC errors

  • From: Dan Hollis
  • Date: Tue Aug 12 05:11:32 2003 
On Mon, 11 Aug 2003, Sean Crandall wrote:
> This worm is amazing.  I have only had filters in place for about 4.5 hours
> and I am already approaching 100 million matches for the deny tcp/135 across
> my network.  Of that, only one customer has said that they needed 135 open
> for legimate use (probably more, but I have only heard from the one).

Isnt this a perfect situation for a 135/tcp tarpit?

-Dan
-- 
[-] Omae no subete no kichi wa ore no mono da. [-]