BCP for ISP to block worms at PEs and NAS