Article View: comp.security.misc
Article #1118Re: ISPs can easily decrease net abuse
From: Jem Berkes
Date: Mon, 01 Dec 2003 18:11
Date: Mon, 01 Dec 2003 18:11
19 lines
2032 bytes
2032 bytes
>:Actually, if ISP's required users to install a router with NAT it would >:eliminate most of it. The hacks and worms could not infect new machines >:protected by NAT. > > Unless there was a translation that let them through, or unless > the NAT router had the target as a "dmz"... > > Not all NAT implimentations are specific about who they let back in. > The existance of a recent outgoing NETBIOS connection could be enough > to allow -anyone- to get in to the NETBIOS ports. Sure, NAT doesn't guarantee security (actually it's not even designed for security, that's a firewall). But at least NAT will will keep out random probes that might otherwise reach NetBIOS, P'N'P, IIS/SQL, or some other fantastic Microsoft OS feature:) -- Jem Berkes http://www.sysdesign.ca/
Technical Details
Message-ID:
<Xns94447C1CBCCCAjbuserspc9org@130.179.16.24>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!nntp.cs.ubc.ca!torn!canopus.cc.umanitoba.ca!not-for-mailReferences:
<Xns944467F028317jbuserspc9org@130.179.16.24> <MPG.1a353cd8c276f345989ea9@news-server.columbus.rr.com> <bqfvd8$k7b$1@canopus.cc.umanitoba.ca>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10c8f2,17f958067a510d3b
X-Google-Attributes: gid10c8f2,public
X-Google-Thread: ff723,17f958067a510d3b
X-Google-Attributes: gidff723,public
X-Google-ArrivalTime: 2003-12-01 10:11:45 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!nntp.cs.ubc.ca!torn!canopus.cc.umanitoba.ca!not-for-mail
From: Jem Berkes <jem@users.pc9__org>
Newsgroups: comp.security.misc,can.internet.highspeed
Subject: Re: ISPs can easily decrease net abuse
Date: 1 Dec 2003 18:11:44 GMT
Organization: PC9
Lines: 19
Sender: umberkes@wnpgmb01dc6-43-58.dynamic.mts.net
Message-ID: <Xns94447C1CBCCCAjbuserspc9org@130.179.16.24>
References: <Xns944467F028317jbuserspc9org@130.179.16.24> <MPG.1a353cd8c276f345989ea9@news-server.columbus.rr.com> <bqfvd8$k7b$1@canopus.cc.umanitoba.ca>
NNTP-Posting-Host: wnpgmb01dc6-43-58.dynamic.mts.net
X-Trace: canopus.cc.umanitoba.ca 1070302304 21003 142.161.43.58 (1 Dec 2003 18:11:44 GMT)
X-Complaints-To: Postmaster@cc.umanitoba.ca
NNTP-Posting-Date: 1 Dec 2003 18:11:44 GMT
User-Agent: Xnews/5.04.25
X-Face: "lSxJlq"(eahd21S6n})>8f#lx%H`'&dseeU_;`ss0(92:cYhwE){!n"f:@vqEmUGW2;a[|Ve~UbIIKw[>%3Y8b1~,TDEOFG@xR;Wb5HM"V`%2Rz`Pn5g]$