I love IP Tables....

[Wolfgang S. Rupprecht]

Les <hlhowell at pacbell.net> writes:
> Hi, Wolfgang,
>  I am sur e you didn't mean to insult the folks who use our efforts,
> the users, but instead the designers of the bots themselves should be the
> ones in deep trouble.  

Les, the number of bots running on DSL and cable modems is totally out
of control.  I'm seeing many hundreds of thousands of connection
attempts per month to the SMTP port for spammers buying services from
bot-masters that are trying to stuff my mailbox.  The time for
ignoring the user's culpability in this is long over.

> Even those who study and work dilligently at defense get hacked
> sometimes via the combination of total effort expended against them,
> and the fact that the hackers only need to "get it right once" as
> has been said by Rumsfeld in connection with terrorists.  I believe
> that it is possible to have good security and still get hit.  I
> mean, we have had banks for thousands of years, and they still get
> robbed.  Do we blame the bankers?

People that run virus riddled systems for the most part aren't folks
hit by zero-day exploits for code that has been inspected by competent
eyes and simply had something slip by.  We are talking about gross
negligence with systems that haven't been maintained and updated in
years.  This collective negligence is costing other folks substantial
amounts in bandwidth and time spent to deal with resource exhaustion
issues.

A system of stiff fines (such as used to prevent operation of unsafe
automobiles) will do wonders to light a fire under folks to keep their
systems up to current standards.

-wolfgang
-- 
Wolfgang S. Rupprecht                http://www.wsrcc.com/wolfgang/
Hints for IPv6 on FC6 http://www.wsrcc.com/wolfgang/fedora/ipv6-tunnel.html