Article View: comp.security.misc
Article #1119Re: ISPs can easily decrease net abuse
From: Walter Roberson
Date: Mon, 01 Dec 2003 18:31
Date: Mon, 01 Dec 2003 18:31
25 lines
2525 bytes
2525 bytes
In article <Xns94447C1CBCCCAjbuserspc9org@130.179.16.24>, Jem Berkes <jem@users.pc9__org> wrote: :Sure, NAT doesn't guarantee security (actually it's not even designed for :security, that's a firewall). But at least NAT will will keep out random :probes that might otherwise reach NetBIOS, P'N'P, IIS/SQL, or some other :fantastic Microsoft OS feature:) When going out, NAT implimentations often try to use the same source port number, using a different port number only if the original is in use. So if you have a PC that has NETBIOS turned on, and Wiley E. Windows decides to do name resolution from the netbios-ns (udp 137) source port, then the NAT implimentation might, as long as the translation lasts, allow -anyone- to connect to that port. And this being UDP, there is mechanism to signal when the name resolution conversation is finished, so the translation would be kept open until some timer expires. The countdown theme from "Jeapordy" is running through my mind loudly enough that you can probably hear it from your end of the city, Jem ;-) -- Positrons can be described as electrons traveling backwards in time. Certainly many Usenet arguments about the past become clearer when they are re-interpreted as uncertainty about the future. -- Walter Roberson
Technical Details
Message-ID:
<bqg1eh$l5j$1@canopus.cc.umanitoba.ca>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.stanford.edu!cyclone.bc.net!torn!canopus.cc.umanitoba.ca!not-for-mailReferences:
<Xns944467F028317jbuserspc9org@130.179.16.24> <MPG.1a353cd8c276f345989ea9@news-server.columbus.rr.com> <bqfvd8$k7b$1@canopus.cc.umanitoba.ca> <Xns94447C1CBCCCAjbuserspc9org@130.179.16.24>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10c8f2,17f958067a510d3b X-Google-Attributes: gid10c8f2,public X-Google-Thread: ff723,17f958067a510d3b X-Google-Attributes: gidff723,public X-Google-ArrivalTime: 2003-12-01 10:31:46 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.stanford.edu!cyclone.bc.net!torn!canopus.cc.umanitoba.ca!not-for-mail From: roberson@ibd.nrc-cnrc.gc.ca (Walter Roberson) Newsgroups: comp.security.misc,can.internet.highspeed Subject: Re: ISPs can easily decrease net abuse Date: 1 Dec 2003 18:31:45 GMT Organization: National Research Council Canada - Conseil national de rechereches Canada Lines: 25 Message-ID: <bqg1eh$l5j$1@canopus.cc.umanitoba.ca> References: <Xns944467F028317jbuserspc9org@130.179.16.24> <MPG.1a353cd8c276f345989ea9@news-server.columbus.rr.com> <bqfvd8$k7b$1@canopus.cc.umanitoba.ca> <Xns94447C1CBCCCAjbuserspc9org@130.179.16.24> NNTP-Posting-Host: zeno.ibd.nrc-cnrc.gc.ca X-Trace: canopus.cc.umanitoba.ca 1070303505 21683 192.70.172.132 (1 Dec 2003 18:31:45 GMT) X-Complaints-To: Postmaster@cc.umanitoba.ca NNTP-Posting-Date: 1 Dec 2003 18:31:45 GMT Originator: roberson@ibd.nrc-cnrc.gc.ca (Walter Roberson)