Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Putting A 'Korset' On The Spread Of Computer Viruses: Invention Stays One Step Ahead Of Anti-virus Software (Science Daily)

Posted Sep 9, 2008 21:36 UTC (Tue) by mheily (guest, #27123)
Parent article: Putting A 'Korset' On The Spread Of Computer Viruses: Invention Stays One Step Ahead Of Anti-virus Software (Science Daily)

This "invention" is totally unnecessary. All you need to do is prevent the malware from reaching your machine in the first place. Just configure your firewall to check the IPv4 Security flag as per RFC-3514, and drop all packets that are flagged as evil. Problem solved.

(Log in to post comments)

Posted Sep 9, 2008 21:39 UTC (Tue) by leoc (subscriber, #39773) [Link]

The problem with that is that all traffic going into or out of Microsoft, Google and the state of North Korea ends up getting filtered. Microsoft and Google I can live without, but an internet without North Korea is no internet I want to be a part of!

Putting A 'Korset' On The Spread Of Computer Viruses: Invention Stays One Step Ahead Of Anti-virus Software (Science Daily)

Posted Sep 10, 2008 12:25 UTC (Wed) by jengelh (subscriber, #33263) [Link]

No problem iptables can do it!

iptables -A INPUT -m geoip --src-cc KP -j ACCEPT iptables -A INPUT -m evil -j DELUDE