Home page logo

nanog logo nanog mailing list archives

Re: and here are some answers [was: Quarantine your infected users spreading malware]
From: Jim Segrave <jes () nl demon net>
Date: Tue, 21 Feb 2006 16:25:13 +0100

On Tue 21 Feb 2006 (08:45 -0500), John Curran wrote:

At 7:45 AM -0500 2/21/06, John Curran wrote:

From the web site: "Only a selected set of web sites will remain available, for example Microsoft update and the 
websites of several anti-virus software companies. The quarantine server tells users what is going on and how this 
problem can be resolved."

One hopes that the Apple web site and online credit form is included in the list...   ;-)    

Alright, in fairness to MSFT, a pointer to Vista/Longhorn (once available)
and instructions to only enter your Admin password during bona fide sw
installations would also go a long way towards preventing recurrence...

We have added mutlple sites, including on-line banking sites which are
appropriate to the Netherlands to the list of reachable sites (we also
use this to encourage paying your bills as well as getting people to
fix their machines)

Jim Segrave           jes () nl demon net

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]