[77710] in North American Network Operators' Group
RE: Time to check the rate limits on your mail servers
daemon@ATHENA.MIT.EDU (Raymond Dijkxhoorn)
Thu Feb 3 10:09:26 2005
Date: Thu, 3 Feb 2005 16:07:10 +0100 (CET)
From: Raymond Dijkxhoorn <raymond@prolocation.net>
To: Joel Perez <jperez@numind.net>
Cc: nanog@merit.edu
In-Reply-To: <E6E861E857C35B4497DD27492E61D7C201F2F78B@numind-mail-new.numind.net>
Errors-To: owner-nanog-outgoing@merit.edu
Hi!
> The only thing I don't see is a way to remove these bots!
> Not everyone knows how to even look at their machines for signs of these
> bots. Heck, I know most of my guys here don't even know how these bots
> work.
For a compromised system, insert CD, reinstall!
> It would be impossible to educate everybody but it's better to try than
> sitting around blocking this and that and not really solving the issue
> at hand.
>
> My .02 cents.
If a pro cannot clean it out safely, then i cannot imagine our typical
homeuser would be able to... and with some luck he installs a firewall and
antivirus next time, after reinstalling his system for the 4th or 5th
time.
Bye,
Raymond.
