This is a user problem, not an ISP problem. Your best bet is to educate your subscribers
VERY CLEARLY IN BIG CAPITAL LETTERS AND EASY SIMPLE WORDS
about the inherent bad juju involved in putting an unsecured Windows (or anything else,
for that matter) box directly on a broadband link.

If you want to be cute, and this is what I'd do to make friends with the marketing/sales
people, is to see whether any of the 'personal firewall' vendors (BlackICE, Norton, ZoneAlarm)
would be willing to cut you a deal to provide that as a supported add-on for a small
charge on whatever 'starter kit' you distribute (I seem to recall Bluewin sending out a CD
to subscribers with some toys like preconfigured browsers, documentation, whatever.)

<rant>I'm still baffled at how few broadband (or dial-up, for that matter) users understand
even the most basic network security concepts.</rant>

Cheers,

-John



Guido Roeskens wrote:

It would be a nice feature to let users use "proxy-only" Internet access if they wish (transparent proxy)
or filter-on-demand, so our users can choose wheter bluewin blocks ports for them

Port Assignments:
Keyword Decimal Description ------- ------- ----------- msp 18/tcp Message Send Protocol
msp 18/udp Message Send Protocol

Net send uses smb (netbios or whatever) in the port range 135-139

It seem these services are using port 18 to
send the message through.
http://www.iana.org/assignments/port-numbers

Any other isp have expirience with that spam problem?
Suggestions? Objections? Flames? YAY... :)

c't had an article about the problem end of last year, maybe you find it on http://www.heise.de
I think there is a c't FAQ with an nice description in german.

Regards,


Guido Roeskens
Bluewin Hostmaster
Bluewin AG



----------------------------------------------
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


----------------------------------------------
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/

Reply via email to