Security Incidents mailing list archives
Re: Scans from proxyprotector.com
From: Valdis.Kletnieks () vt edu
Date: Thu, 22 May 2003 15:13:44 -0400
On Wed, 21 May 2003 16:28:21 EDT, Justin Pryzby said:
Or a site that lists hosts that should be blocked? Like the dynamic email blocking: just cron a daily download and firewall rule update. Anyone up for this?
There's two problems you always need to overcome with this sort of proposal: 1) Trusting the people that run the block-list. There's been no end of anti-spam RBL's that have been rogue to some greater or lesser degree, and not even a clear definition of what 'rogue' even means. Go back and research the great ORBZ/MAPS feud - wasn't *ANYBODY* in that one that was completely and totally blameless.. And yes, I'm saying that even though I *do* have great respect for at least some of the people involved - nobody makes perfect choices all the time... 2) Trusting the actual update process. All sorts of openings for the ensuing hilarity as you download a new ruleset that happens to block your default router or something. (Hint - why do most big shops *NOT* run WindowsUpdate or similar automagic update-on-the-fly?) -- Valdis Kletnieks Computer Systems Senior Engineer Virginia Tech
Attachment:
_bin
Description:
Current thread:
- Re: Scans from proxyprotector.com, (continued)
- Re: Scans from proxyprotector.com Kurt Seifried (May 20)
- RE: Scans from proxyprotector.com King, Brian (May 20)
- RE: Scans from proxyprotector.com Matthew F. Caldwell (May 20)
- RE: Scans from proxyprotector.com Compton, Rich (May 20)
- Re: Scans from proxyprotector.com Kurt Seifried (May 21)
- Re: Scans from proxyprotector.com Erik Fichtner (May 22)
- Are they back? (was Re: Scans from proxyprotector.com) Erik V. Olson (May 26)
- RE: Are they back? (was Re: Scans from proxyprotector.com) Mark Ng (May 27)
- RE: Are they back? (was Re: Scans from proxyprotector.com) jlewis (May 28)
- Re: Scans from proxyprotector.com Kurt Seifried (May 21)
- Re: Scans from proxyprotector.com Justin Pryzby (May 22)
- Re: Scans from proxyprotector.com Valdis . Kletnieks (May 22)
- RE: Scans from proxyprotector.com Mark Ng (May 27)
- RE: Scans from proxyprotector.com Rob Shein (May 27)
- Re: Scans from proxyprotector.com Kurt Seifried (May 27)