[Techtalk] outlook virii

James james at james-web.net
Sat Apr 13 10:40:47 EST 2002


> haven't seen an overwhelming amount of commercial ISPs making an
effort
> to prevent viruses travelling anywhere besides email.I could be wrong.

Most cable ISPs use ingress filtering to block port 80 inbound now.
This stops Nimda/CR and also stops people from running web servers,
unless they want to buy the "Business" service (aka $50 extra, same
service, port 80 open, no SLA, same crappy tech support).

> Perhaps a web page that told you <when you go there> whether you
should
> check for a virus by the activity from your computer, but I'd hate to
be
> the one to explain to all of the privacy freaks out there that I'm
> really not scanning their computers, their computers are coming out to
> meet me!

Is this really a reasonable solution, given that this worm infects
mainly servers?  Think of all the servers out there, sitting unmonitored
in colos, closets, basements, offices and bedrooms.  Popping up a window
with how to fix it if no one is looking won't fix the problem. 

I think the best policy, if it really bothers you (it shouldn't), is to
just report offending IPs to their netblock owner/abuse@ address.

- James




More information about the Techtalk mailing list