[60990] in North American Network Operators' Group
RE: To send or not to send 'virus in email' notifications?
daemon@ATHENA.MIT.EDU (Wesley Vaux)
Wed Aug 20 16:43:03 2003
From: "Wesley Vaux" <Wesley.Vaux@globalknowledge.com>
To: "'Daniel Senie'" <dts@senie.com>, <nanog@merit.edu>
Date: Wed, 20 Aug 2003 14:10:09 -0400
Errors-To: owner-nanog-outgoing@merit.edu
Has anyone else gotten hit by this and know how to stop it? the new dats
from McAffee have not effect....of course...and I can't find a tool
anywhere. Does anyone have any ideas?
Wes Vaux, CCNA, CCDA
Network Security Engineer,
9000 Regency Pkwy
Ste 500
Cary, NC 27511
t 919.463.6782
f 919.463.1290
Global Knowledge
Experts Teaching Experts
http://www.globalknowledge.com
-----Original Message-----
From: Daniel Senie [mailto:dts@senie.com]
Sent: Wednesday, August 20, 2003 12:37 PM
To: nanog@merit.edu
Subject: Re: To send or not to send 'virus in email' notifications?
Notifications from virus scanners is backscatter, just the same as the
backscatter generated by Smurf attacks. The virus scanners are contributory
technology in the conduct of a denial of service attack in exactly the same
way as having directed broadcasts enabled on your routers was (read RFC
2644 for the details).
Please let's stop building technology that aids in the conduct of DoS
attacks.
