🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #1119

Re: ISPs can easily decrease net abuse

#1119
From: Walter Roberson
Date: Mon, 01 Dec 2003 18:31
25 lines
2525 bytes
In article <Xns94447C1CBCCCAjbuserspc9org@130.179.16.24>,
Jem Berkes  <jem@users.pc9__org> wrote:
:Sure, NAT doesn't guarantee security (actually it's not even designed for 
:security, that's a firewall). But at least NAT will will keep out random 
:probes that might otherwise reach NetBIOS, P'N'P, IIS/SQL, or some other 
:fantastic Microsoft OS feature:)

When going out, NAT implimentations often try to use the same source
port number, using a different port number only if the original is in
use. So if you have a PC that has NETBIOS turned on, and
Wiley E. Windows decides to do name resolution from the netbios-ns
(udp 137) source port, then the NAT implimentation might, as long
as the translation lasts, allow -anyone- to connect to that port.
And this being UDP, there is mechanism to signal when the name
resolution conversation is finished, so the translation would be kept
open until some timer expires.

The countdown theme from "Jeapordy" is running through my mind loudly
enough that you can probably hear it from your end of the city, Jem ;-)

-- 
Positrons can be described as electrons traveling backwards in time.
Certainly many Usenet arguments about the past become clearer when they
are re-interpreted as uncertainty about the future.
   -- Walter Roberson
Technical Details
Message-ID: <bqg1eh$l5j$1@canopus.cc.umanitoba.ca>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.stanford.edu!cyclone.bc.net!torn!canopus.cc.umanitoba.ca!not-for-mail
References: <Xns944467F028317jbuserspc9org@130.179.16.24> <MPG.1a353cd8c276f345989ea9@news-server.columbus.rr.com> <bqfvd8$k7b$1@canopus.cc.umanitoba.ca> <Xns94447C1CBCCCAjbuserspc9org@130.179.16.24>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10c8f2,17f958067a510d3b
X-Google-Attributes: gid10c8f2,public
X-Google-Thread: ff723,17f958067a510d3b
X-Google-Attributes: gidff723,public
X-Google-ArrivalTime: 2003-12-01 10:31:46 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.stanford.edu!cyclone.bc.net!torn!canopus.cc.umanitoba.ca!not-for-mail
From: roberson@ibd.nrc-cnrc.gc.ca (Walter Roberson)
Newsgroups: comp.security.misc,can.internet.highspeed
Subject: Re: ISPs can easily decrease net abuse
Date: 1 Dec 2003 18:31:45 GMT
Organization: National Research Council Canada - Conseil national de rechereches Canada
Lines: 25
Message-ID: <bqg1eh$l5j$1@canopus.cc.umanitoba.ca>
References: <Xns944467F028317jbuserspc9org@130.179.16.24> <MPG.1a353cd8c276f345989ea9@news-server.columbus.rr.com> <bqfvd8$k7b$1@canopus.cc.umanitoba.ca> <Xns94447C1CBCCCAjbuserspc9org@130.179.16.24>
NNTP-Posting-Host: zeno.ibd.nrc-cnrc.gc.ca
X-Trace: canopus.cc.umanitoba.ca 1070303505 21683 192.70.172.132 (1 Dec 2003 18:31:45 GMT)
X-Complaints-To: Postmaster@cc.umanitoba.ca
NNTP-Posting-Date: 1 Dec 2003 18:31:45 GMT
Originator: roberson@ibd.nrc-cnrc.gc.ca (Walter Roberson)