🚀 go-pugleaf

"jankemi(remove)" <"jankemi(remove)"@mail.com> wrote in news:LqFTa.116237
$wk6.30285@rwcrnsc52.ops.asp.att.net:

> Bill Johnston wrote:
>> [posted and mailed]
>> 
>> I've read the alerts from Cisco, SANS, and CERT
>> regarding the latest IOS flaw, which identify 
>> only the potential for denial of service attacks
>> to be directed at certain well-known TCP ports.
>> 
> 
> IP Protocols, not TCP ports.
> 
>> A SAN "Flash" publication noted that an exploit
>> had been observed "in the wild".  Unfortunately,
>> it neglected to describe the vehicle for this 
>> exploit in even a basic way that could help 
>> Cisco admins plan a rational IOS migration 
>> strategy.  
>> 
> 
> Cisco's alert was revised last week to include specific ACL's that will 
> stop the attack. Our ACL's went in last Thursday evening.
> 
> [snip]
> 
>> "Go upgrade EVERYTHING", just isn't an adequate
>> set of marching orders.  Even if that is the 
>> ultimate goal, one must have some information 
>> if one is to plan, prioritize, and execute a 
>> rational response.
>> 
>> - Bill
> 
> The information exists in Cisco's announcment.
> 
> --Mike
> 

Mike,

Like you we placed the access-lists up nearly immeadately and as we have 
to opportunity to upgrade IOS we can remove them.  One thing that I 
noticed is that I didn't get any hits.  Have you noticed any hits on 
yours?

Thanks,
-Jeff C