Port blocks - extension

Dear All

The core routers have blocked more than 9.6million packets
on TCP ports 1025, 2745 and 6129 since these port blocks
were implemented.

The situation within the University appears to be under control,
but because the Polybot virus is very disruptive, and the Bagle
virus and its variants are still prevalent, these port blocks are
proposed to be left in place for another two months.

In the University, there have not been any reports of communication
or services being disrupted. Please let me know if there are any
issues with these port blocks. Thanks.

Regards
George

Date: Fri, 12 Mar 2004 16:55:19 +1100
From: George Ng <georgeng@unimelb.edu.au>
Subject: Port blocks
X-Sender: georgeng@128.250.6.196
To: its-announce@unimelb.edu.au
X-Mailer: QUALCOMM Windows Eudora Version 6.0.0.22
Comments: ITS Announcements Mailing List
X-Spam-Score: (-1.5) FROM_UNIMELB
X-Spam-Info: http://www.infodiv.unimelb.edu.au/systems/spam/

Dear All

Recently, there have been a number of computers that have
been extensively scanning IP addresses outside the University.
The administrators of these computers have been notified.

To contain the situation while being remedied, the following
ports which are used by the malicious software are proposed
to be blocked in the direction leaving the University network:
TCP ports 1025, 2745, 6129.

These port blocks are targetted to be implemented on:
Tue 16 Mar 2004 at 9:30AM
for a period of three weeks.

Please let me know as soon as possible if you have any
concerns on this. Thanks.

Regards
George

--
George Ng
IT Security Co-ordinator, Information Division
University of Melbourne, Thomas Cherry Building
T: +61-3-8344-4433 E: georgeng@unimelb.edu.au

This e-mail and any attachments may contain personal information or information that is otherwise confidential or the subject of copyright. Any use, disclosure or copying of any part of it is prohibited. The University does not warrant that this email or any attachments are free from viruses or defects. Please check any attachments for viruses and defects before opening them. If this e-mail is received in error please delete it and notify us by return e-mail.

--
George Ng
IT Security Co-ordinator
Information Division
University of Melbourne

1.03 Elizabeth Murdoch Building
Parkville, VIC 3010, Australia

T: +61-3-8344-4433
E: georgeng@unimelb.edu.au

This e-mail and any attachments may contain personal information or information that is otherwise confidential or the subject of copyright. Any use, disclosure or copying of any part of it is prohibited. The University does not warrant that this email or any attachments are free from viruses or defects. Please check any attachments for viruses and defects before opening them. If this e-mail is received in error please delete it and notify us by return e-mail.