Date: Wed, 18 Oct 2006 11:12:26 -0400
From: DONALD WINAKER <dwinaker@jhu.edu>
Subject: Re: Inquiry about e-mails which have not been replied to	[81111:23473]
In-reply-to: <C15704DC.A179%mross@acm.jhu.edu>
To: mross@acm.jhu.edu, dwinaker@jhu.edu
Cc: Dean Zarriello <deanz@jhu.edu>, Darren Lacey <dlacey1@jhu.edu>,
 Jennifer Peterson <jpeterson@jhuadig.admin.jhu.edu>
Message-id: <45360C1A0200001F0000CAAF@cis27.hosts.jhmi.edu>
MIME-version: 1.0
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: 7bit
Content-disposition: inline
References: <44F550EE0200001F00008B35@cis27.hosts.jhmi.edu>
 <C15704DC.A179%mross@acm.jhu.edu>
Status: O
Content-Length: 3678

Michael, there have been a number of conversations with members of my
team, the network group, and the Chief Information Security Officer
regarding this request.

As previously noted, we cannot unblock port 6667 as this increases our
security exposure.  Unfortunately we also cannot open up all of the
sites you requested either.  My next suggestions would be to narrow your
list to ten or fewer sites and give us the internal addresses that need
the access.



>>> Michael Ross <mross@acm.jhu.edu> 10/14/2006 9:19:24 PM >>>
I sent you the request for specific addresses as you specified in the
e-mail
I am replying to on 8/30/06 . It has been over a month and none of the
requests have been implemented. What is the ETA for the requests to be
implemented? Thanks.

Michael Ross


on 8/30/06 8:48 AM, DONALD WINAKER at dwinaker@jhu.edu wrote:

> Michael,
> I believe we offered to enable this for specific addresses that you
> request.  We cannot enable this for everyone to everything from
jhu.edu.
> We get hundreds of requests for changes to firewall rules, we are
trying
> to strike a balance of providing necessary access without developing
> processes that are too cumbersome for us to manage.
> 
> Thanks, Don
> 
>>>> Michael Ross <mross@acm.jhu.edu> 8/29/2006 5:37 PM >>>
> Would it be possible to allow outgoing traffic on port 6667 from
> *.jhu.edu
> but not from *.jhmi.edu?
> 
> I would be happy to discuss this issue further.
> 
> Thanks.
> 
> 
> on 8/28/06 2:48 PM, network.security at network.security@jhmi.edu 
> wrote:
> 
>> Please give me a call at 410-735-4337 to discuss this further.
>> 
>> Johns Hopkins Network Security
>> Network and Telecommunication Services
>> Johns Hopkins University and Medical Institutions
>> 
>>> -----Original Message-----
>>> From: "Michael Ross" <mross@acm.jhu.edu>
>>> Received: 8/28/2006 2:03 PM
>>> To: "network.security" <network.security@jhmi.edu>
>>> Subject: Re: Inquiry about e-mails which have not been replied to
>>> [81111:23469]
>>> 
>>> Why not just unblock port 6667 for outgoing connections? Since
> existing
>>> mechanisms (see http://it.jhu.edu/restricted/infosec/blocklist.html

> )
>>> automatically detect and block hosts with malware which uses IRC,
> clearly,
>>> blocking outgoing traffic on port 6667 only blocks legitimate
> traffic
>>> because hosts sending traffic from malware are already
automatically
> blocked
>>> by the mechanism seen at
> http://it.jhu.edu/restricted/infosec/blocklist.html 
>>> .
>>> 
>>> Keep in mind IRC has many legitimate uses. For example,
> irc.freenode.net has
>>> many IRC channels (chat rooms) for help with open source software.
> It also
>>> educational channels (chat rooms) from organizations like NASA.
>>> Additionally, irc.mozilla.org has channels (chat rooms) for help
> with
>>> Firefox.
>>> 
>>> 
>>> I would be happy to discuss this issue further.
>>> 
>>> Thank you.
>>> 
>>> 
>>> on 8/28/06 11:33 AM, network.security at network.security@jhmi.edu

> wrote:
>>> 
>>>> Is there a specific IRC server you would like access to?
>>>> 
>>>> Johns Hopkins Network Security
>>>> Network and Telecommunication Services
>>>> Johns Hopkins University and Medical Institutions
>>>> 
>>>>> -----Original Message-----
>>>>> From: "Michael Ross" <mross@acm.jhu.edu>
>>>>> Received: 8/27/2006 4:50 PM
>>>>> To: network.security@jhu.edu 
>>>>> Subject: RE: Inquiry about e-mails which have not been replied
to
>>>>> 
>>>>> On 7/28/06, I sent an e-mail to network.security@jhu.edu with
the
> subject
>>>>> "Request for port unblocking". I have received a reply.
>>>>> 
>>>>> What is the status? What is going on? Thanks.
>>>>> 
>>>>> Michael Ross
>>>>> 
>>>>> 
>>> 
>>>