Home page logo
/

nanog logo nanog mailing list archives

RE: To send or not to send 'virus in email' notifications?
From: "Stephen J. Wilcox" <steve () telecomplete co uk>
Date: Wed, 20 Aug 2003 18:11:41 +0100 (BST)



On Wed, 20 Aug 2003, Wesley Vaux wrote:

At 10:30:43 my systems rebooted after installing hotfix "Windows 2000 Hotfix
KB823980 was installed" and machines rebooted.  Any ideas on how to remove
this or what it may be?

http://www.microsoft.com/windows2000/downloads/servicepacks/SP4/HFDeploy.htm#what_is_a_hotfix__mbbi

http://www.microsoft.com/windows2000/downloads/servicepacks/SP4/HFDeploy.htm#removing_a_windows_hotfix_adbb

KB823980 appears to be the patch against DCOM

why do you wish to remove it?

Steve


              Wes Vaux, CCNA, CCDA
              Network Security Engineer,
              9000 Regency Pkwy
              Ste 500
              Cary, NC 27511
              t 919.463.6782
              f 919.463.1290

              Global Knowledge
              Experts Teaching Experts
              http://www.globalknowledge.com



-----Original Message-----
From: Stephen J. Wilcox [mailto:steve () telecomplete co uk]
Sent: Wednesday, August 20, 2003 10:33 AM
To: Joe Maimon
Cc: nanog () merit edu
Subject: Re: To send or not to send 'virus in email' notifications?




On Wed, 20 Aug 2003, Joe Maimon wrote:


Considering the amount of email traffic generated by responding to 
forged  virus laden email from culprits like sobig should email virus 
scanning systems be configured to send notifications back to sender or
not?

well if you dont tell them they wont know, altho with sobig the return
address 
is false anyhow

it would probably be best to cache the sender/virus combinations and send a 
single message per 7 days 

Steve



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]