kpatz
MY HEAD A SPLODE
Premium
join:2003-06-13
Manchester, NH
| reply to Boomerang86
Re: This blows...
Once again, I have to say, blocking ports across the board only masks the symptoms, it does NOT solve the underlying problem.
It's better to identify and disconnect zombied systems. Even with port 25 blocked, zombies can still do a lot of damage, such as DDoS attacks. And as this tactic becomes more popular, spammers will just find other ways to get their crap out, so it doesn't stop spam either.
--
Robert Tappan Morris, Jr., got six months in jail for crashing 10% of the computers that Bill Gates made $100 million crashing last weekend. |
|
Steve
I'm a PC, so shut up
Consultant
join:2001-03-10
Yorba Linda, CA
| said by kpatz  :
Once again, I have to say, blocking ports across the board only masks the symptoms, it does NOT solve the underlying problem.
The underlying problem is that "lots of users are idiots", and I don't think that's an ISP's problem to solve.
Steve
--
Stephen J. Friedl * Security Consultant * Tustin, California USA * my web site |
|
Sysadmin
NoBama
Premium,MVM
join:2000-07-07
Sacramento, CA
 ·Pacific Bell - SBC
| reply to kpatz
I think it is a good short term solution to slow down the spammers. You are correct that they will find ways around it but at least it will break what they have in place for the moment.
In the long term ISP's need to force the responsibility on the end users (by making it part of their TOS) and take them offline of they don not fix their zombie computers.
--
Join Team Starfire SETI@Home
Put your unused clock cycles to work! |
|
