North American Network Operators Group|
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical
Re: Port 445 issues (was: Port 80 Issues)
> So far the Deloder worm appears to be responding to normal congestion > feedback controls, limiting its network impact. Like CodeRed, Nimda, etc > some edge providers may need to implement network controls due to > scanning activities causing cache busting, but I suspect most network > backbones will not need to do anything. I agree this is not a backbone issue. Since we are an ISP and at the edge, it is a good place to drop this. Traffic is not as large, as of yet, as the SQL worm. Blocking port 445, for us, means far less $$ in support time to deal with abuse reports and infected users.