North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Quarantine your infected users spreading malware

  • From: Gadi Evron
  • Date: Mon Feb 20 18:01:02 2006

Scott Weeks wrote:
----- Original Message Follows -----
From: Gadi Evron <[email protected]>

Many ISP's who do care about issues such as worms,
infected users  "spreading the love", etc. simply do not
have the man-power to handle  all their infected users'
population.

Some who are user/broadband ISP's (not say, tier-1 and
tier-2's who  would be against it: "don't be the
Internet's Firewall") are blocking  ports such as 139 and
445 for a long time now, successfully preventing  many of
their users from becoming infected. This is also an
excellent  first step for responding to relevant outbreaks
and halting their progress.

Philosophy aside, it works. It stops infections. Period.

Back to the philosophy, there are some other solutions as
well. Plus,  should this even be done?


Oh geez, here we go again...  Search the archives and read
until you're content.  It's a non-thread.  This horse isn't
only dead, it's not even a grease spot on the road any more.
 :-(
I quite agree, which is why I trived to cover the philosophical part from both sides. Now, how about some solutions that came about since our last discussion that was nothing BUT philosophy?