Risorse per professionisti IT > Home page del forum > End to End Trust > Lets get real! Ban end user servers!
Formula una domandaFormula una domanda
 

DomandaLets get real! Ban end user servers!

Tutte le risposte

  • lunedì 20 ottobre 2008 0.05motherboardlove Medaglie utenteMedaglie utenteMedaglie utenteMedaglie utenteMedaglie utente
     
    I absolutely would not! I run a server out of my home, and if it were banned, I would have no way to keep up with friends around the world.
  • martedì 31 marzo 2009 23.04Nathan V Medaglie utenteMedaglie utenteMedaglie utenteMedaglie utenteMedaglie utente
     
    No.  I already have some places I cannot send mail to from my home server as a result of 'banning' or blacklisting of end-user IP space provided by my ISP.  The answer isn't to black hole everything that doesn't conform or isn't enterprise, the better solution would be using a method of authentication and non-repudiation to the email process and then holding the rule/law breakers accountable.
  • martedì 31 marzo 2009 23.06Nathan V Medaglie utenteMedaglie utenteMedaglie utenteMedaglie utenteMedaglie utente
     
    No.  I already have some places I cannot send mail to from my home server as a result of 'banning' or blacklisting of end-user IP space provided by my ISP.  The answer isn't to black hole everything that doesn't conform or isn't enterprise, the better solution would be using a method of authentication and non-repudiation to the email process and then holding the rule/law breakers accountable.
  • mercoledì 8 aprile 2009 20.42John Biccum Medaglie utenteMedaglie utenteMedaglie utenteMedaglie utenteMedaglie utente
     
    I like this approach.  It rewards good behavior and discourages bad behavior.  But how can we use digital signatures on mail when most mail is read via webmail and webmail providers don't support standard methods of signing mail such as S/MIME. 
  • venerdì 17 aprile 2009 20.12Gazanga Medaglie utenteMedaglie utenteMedaglie utenteMedaglie utenteMedaglie utente
     
    I'm not sure this would fly very well, but there is nothing to prevent you from banning IP blocks of non-ARIN-based IP addresses.
    Eric Irvin, MCP, MCSA, MCSE, MCITP:Enterprise Admin, CISSP http://www.diggingup.com
  • mercoledì 22 aprile 2009 2.26Harry WaldronMVPMedaglie utenteMedaglie utenteMedaglie utenteMedaglie utenteMedaglie utente
     
    While I favor freedoms in using the Internet and oppose bans, another idea is to shut down malicious servers or websites that are intentionally designed to harm others.  This could be difficult to determine in some cases as folks also get accidentally infected as well.  Shutdowns should only be used on the worst offenders.
  • mercoledì 22 aprile 2009 10.05Marcel Knows Better Medaglie utenteMedaglie utenteMedaglie utenteMedaglie utenteMedaglie utente
     
    How would you define an end user server? More specifically, how would you define a user and how would you define a server? How would you define unregulated? By which regulations? In which country? How would you define known phishers?

    So let's assume you are American and you get a lot of spam.  So let's say president Obama decides to block all connections from China, because they are "the phishers".  This would mean that thousands of legitimate businesses can't do their business anymore with China. Also, since the phishers are not really Chinese, but actually Russians or Americans using hacked Chinese computers, they will use hacked computers inside the USA instead. So next thing you know, all spam will come from your own country. Then what will you do?

    Your idea is unfeasable and not the right way to solve the problem. Instead, like mentioned by others in this thread, secure email (S/MIME, PGP) would be a correct solution.
  • giovedì 23 aprile 2009 17.04Harry WaldronMVPMedaglie utenteMedaglie utenteMedaglie utenteMedaglie utenteMedaglie utente
     
    Agreeing with Marcel on the difficulty of "policing" the Internet and also favor current freedoms in spite of the issues we see.  Realistically, users must fend for themselves (esp. home users), using two approaches:

    -- The best technological defenses (e.g., FW, AV, ASW, anti-spam, etc)
    -- Best safety practices (avoidance, keeping up with current treats, "think before you click")

    As a slide in one of my formal security classes noted:

    SEC-U-R-IT-Y = "You are it" when it comes to security :)
    Harry Waldron, Microsoft MVP - Enterprise Security
  • martedì 23 giugno 2009 4.33Pappkartoosh Medaglie utenteMedaglie utenteMedaglie utenteMedaglie utenteMedaglie utente
     
    I'd like to quote a popular saying. "What comes around, gose around." Some years back I surfed zeroday sites and got blasted with ____ spam. I was so shocked that they were not happy with the pop-ups alone, I [mimic'd] a valid Department of Justice email and watched the fur fly. Purhaps not the most moral thing I have ever done but it was satisfying. They were shutdown within a week. To this day I keep several email accounts and email programs... phish this.

    Gazanga,
    We ARINs got some cleaning up to do before we are ready to host man's only hopeful technology. I hope that day comes when we can offer a open and even hand.

    Pappkatoosh
    Just another speck in a fibernachi sequence of stars about to be reordered by Andromeda