FirewallWizards
[Top] [All Lists]

Re: [fw-wiz] worm?

To: Firewall Wizards Security Mailing List <firewall-wizards@listserv.cybertrust.com>
Subject: Re: [fw-wiz] worm?
From: "Steven M. Bellovin" <smb@cs.columbia.edu>
Date: Fri, 2 Feb 2007 08:29:22 +0000
Cc: paul@compuwar.net
Delivered-to: sp-com-lists@consult.net
Delivered-to: fwwizards-list2@consult.net
Delivered-to: firewall-wizards@listserv.cybertrust.com
In-reply-to: <Pine.LNX.4.44.0702011817260.28771-100000@bat.clueby4.org>
List-archive: <https://listserv.icsalabs.com/pipermail/firewall-wizards>
List-help: <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=help>
List-id: Firewall Wizards Security Mailing List <firewall-wizards.listserv.icsalabs.com>
List-post: <mailto:firewall-wizards@listserv.icsalabs.com>
List-subscribe: <https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards>, <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=subscribe>
List-unsubscribe: <https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards>, <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=unsubscribe>
Organization: Columbia University
References: <3c4611bc0702011434jbc0a3e2xcd5b6d0a5f020825@mail.gmail.com> <Pine.LNX.4.44.0702011817260.28771-100000@bat.clueby4.org>
Reply-to: Firewall Wizards Security Mailing List <firewall-wizards@listserv.icsalabs.com>
Sender: firewall-wizards-bounces@listserv.icsalabs.com
On Thu, 1 Feb 2007 18:17:54 -0500 (EST)
"Paul D. Robertson" <paul@compuwar.net> wrote:

> On Thu, 1 Feb 2007, Brian Loe wrote:
> 
> > Fortunately we have managed to configure enough security that we
> > disallow outgoing connections to port 25.
> 
> Hopefully tcp/6667 as well.
> 
Or use something like NetFlow to find out what other connections are
coming from/going to that machine.


                --Steve Bellovin, http://www.cs.columbia.edu/~smb
_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

<Prev in Thread] Current Thread [Next in Thread>