I keep thinking the same. It's the best option short of just targeting it against themselves and causing just enough nuisance that they either firewall, upgrade

I keep thinking the same. It's the best option short of just targeting it against themselves and causing just enough nuisance that they either firewall, upgrade, or correctly configure these ancient protocols. For example for the protocol that this article is about: "Windows 2000 Server requires UDP" https://wiki.wireshark.org/MS-CLDAP https://wiki.wireshark.org/MS-CLDAP. Anything newer than Win2k means you can already turn it off.