[61109] in North American Network Operators' Group
Re: Sobig.f surprise attack today
daemon@ATHENA.MIT.EDU (Petri Helenius)
Fri Aug 22 17:50:40 2003
Date: Sat, 23 Aug 2003 00:49:08 +0300
From: Petri Helenius <pete@he.iki.fi>
To: Omachonu Ogali <nanog@missnglnk.com>
Cc: Todd Mitchell - lists <lists@ciphin.com>, nanog@merit.edu
In-Reply-To: <20030822184545.GB74738@dipole.informationwave.net>
Errors-To: owner-nanog-outgoing@merit.edu
Omachonu Ogali wrote:
>If you're responsible for any of the IPs on the list, better
>permanently remove them from your DHCP pools, IP assignments,
>dial-up pools, or anything else that assigns IP addresses,
>because these will be filtered and forgotten for the next
>200 years.
>
>
If the virus guys get smarter they´ll put in /24´s or /16´s next time.
Just scan through
the block with magic cookie until you get the reply you´re looking for
and start
downloading the update.
Anyone willing to block the whole /16 of their dialup or dsl users if it
shows up on
an AV vendor´s list?
Pete
