Knock on wood...but, I haven't had a single virus get into my network yet. I have been blocking NETBIOS ports forever with a stateless firewall...then I have a stateful firewall as well. Same for outgoing.
Firewalls do help! Sully -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Blazen Wireless Sent: Sunday, November 09, 2003 9:51 PM To: [EMAIL PROTECTED] Subject: Re: [smartBridges] sB Network Issue Most these worm hassles come through on port 137,139 or 445 so if you shut those ports down for incoming on your head end router I.E your T-1 router then you should not see as much problems with worms getting into your system, then all you have to do is patch and remove the worm from those already infected. I have 8+ customer PC's I am doing virus cleanup on and I will be charging something and they were happy to have me do it. You can not control every worm or virus from getting into your system but you can make it harder.. ----- Original Message ----- From: "Roger Howard" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, November 09, 2003 9:04 PM Subject: [smartBridges] sB Network Issue One of the problems I seem to be facing frequently these days is that a single customer can get a virus and generate tremendous amounts of traffic, which brings the whole network to a crawl. Normally bandwidth shaping at the NOC will limit the amount the customer can transmit, due to the Transmission Control Protocol part of TCP/IP. But if it is something like the Nachi.worm it is ping packets which do not have transmission control and can be spewed out at tremendous rates that no bandwidth shaper can control. So what's the solution to stop these slowdowns and outages caused by these viruses? A) Reduce the customer's functionality by insisting they use a router or firewall. B) Have bandwidth shaping at the CPE. Personally I prefer B.... but that seems to be expensive, usually. Smartbridges, it might be something you can include in your Nexus product? Thanks, Roger The PART-15.ORG smartBridges Discussion List To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges) Archives: http://archives.part-15.org The PART-15.ORG smartBridges Discussion List To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges) Archives: http://archives.part-15.org The PART-15.ORG smartBridges Discussion List To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges) Archives: http://archives.part-15.org
