Re: Re(2): Windows Messenger Popup Spam on UDP Port 1026

[Ron DuFresne <dufresne () winternet com>]

        [SNIP]

> And they are losing customers for this. When I spoke to them, they
> refused to guarantee that they would not implement these blocks for a
> static IP user, only claimed that they do not implement them.
>
> If you are willing to spend $20 above RCN's already premium rates, you
> can get multiple static IPs and an agreement that permits you to run
> servers. (I will send details *off list* to anyone who wants them... we
> wander rapidly away from the topic of port blocking.)
>
> Of course, you'd be surprised at how many people *think* they want to be
> able to run servers, but wind up 0wn3d...

At least with DSL, folks are able to decide to use most any ISP they wish,
that serves their area.  Cable being a different confined beast.  But, I
can say, having relocated a few years back, and doing the new ISP search,
I was surprised how many local ISP's actually include 16-32 blocks of
addresses, course, this is not for a simple dialup account, but directed
to those requiring dedicated access.

And, as for the last point raised, the real shame is in how many folks
that are supposed to be professionals in their respective IT field, end up
with systems "secured" so poorly they end up being owned as well.  Nimda
and code red hit a few west coast cities and counties so badly we've taken
to blackholing their complete netblocks, on each and every system we
install and all firewalls and filtering routers we place into play.
Until government and business can demonstrate and 'guide' the clueless
home users, with at least a modicum of demonstratable sound
security practices, we need to cut the homers a break for now <smile>

>

Thanks,

Ron DuFresne
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
        ***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html