[77723] in North American Network Operators' Group
Re: Time to check the rate limits on your mail servers
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Thu Feb 3 12:05:14 2005
To: Raymond Dijkxhoorn <raymond@prolocation.net>
Cc: Joel Perez <jperez@numind.net>, nanog@merit.edu
In-Reply-To: Your message of "Thu, 03 Feb 2005 16:07:10 +0100."
<Pine.LNX.4.61.0502031605400.11593@mailbox.prolocation.net>
From: Valdis.Kletnieks@vt.edu
Date: Thu, 03 Feb 2005 12:04:40 -0500
Errors-To: owner-nanog-outgoing@merit.edu
--==_Exmh_1107450274_2515P
Content-Type: text/plain; charset=us-ascii
On Thu, 03 Feb 2005 16:07:10 +0100, Raymond Dijkxhoorn said:
> > The only thing I don't see is a way to remove these bots!
> > Not everyone knows how to even look at their machines for signs of these
> > bots. Heck, I know most of my guys here don't even know how these bots
> > work.
>
> For a compromised system, insert CD, reinstall!
BZZT! But thank you for playing.
Don't *RE*-install. If you got whacked by a bot on Monday, and re-install
Sunday's configuration of software on Tuesday, all that means is that Wednesday
you'll get re-whacked. Lather, rinse, repeat.
Install *SOMETHING ELSE*. Something less vulnerable to all this manure.
(I'll mention the *other* alternative, replacing/upgrading the user, mostly
for completeness and so we can all have a good chuckle)
--==_Exmh_1107450274_2515P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iD8DBQFCAlmhcC3lWbTT17ARAj+qAJ0d+10xbDM+zWf7R8xAyb4K4+PKjgCfXkMS
F5pVjweD3Cb0ZIuQqjeWNvU=
=Rdt9
-----END PGP SIGNATURE-----
--==_Exmh_1107450274_2515P--
