Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Fast flux foils bot-net takedown
Robert Lemos, SecurityFocus 2007-07-09

Network security analyst Lawrence Baldwin has helped take down his share of bot nets, but he worries that those days may largely be over.

Comments Mode:
Fast flux foils bot-net takedown 2007-07-10
Anonymous (3 replies)
Re: Fast flux foils bot-net takedown 2007-07-12
Anonymous (1 replies)
Re: Re: Fast flux foils bot-net takedown 2007-07-13
Anonymous (1 replies)
Nice idea... ...in theory.

I assume that you want providers to force their customers to use their SMTP servers.

But: If you're running a bot net, nobody can stop you from creating an open mail relay using a port different from the standard SMTP port (all those assigned port numbers are just a convention, remember...).

Do you really want your ISP to filter the contents of all your outbound TCP connections?

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11473/34735#34735
Re: Fast flux foils bot-net takedown 2007-07-12
Anonymous (1 replies)
Fast flux foils bot-net takedown 2007-07-14
C9mpuuterSeK3rity D00d (1 replies)







 

Privacy Statement
Copyright 2009, SecurityFocus