Home page logo

nanog logo nanog mailing list archives

Re: Sobig.f surprise attack today
From: Petri Helenius <pete () he iki fi>
Date: Sat, 23 Aug 2003 00:49:08 +0300

Omachonu Ogali wrote:

If you're responsible for any of the IPs on the list, better
permanently remove them from your DHCP pools, IP assignments,
dial-up pools, or anything else that assigns IP addresses,
because these will be filtered and forgotten for the next
200 years.
If the virus guys get smarter they´ll put in /24´s or /16´s next time. Just scan through the block with magic cookie until you get the reply you´re looking for and start
downloading the update.

Anyone willing to block the whole /16 of their dialup or dsl users if it shows up on
an AV vendor´s list?


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]