[87097] in North American Network Operators' Group
Re: Sober
daemon@ATHENA.MIT.EDU (Michael Loftis)
Fri Dec 2 15:14:05 2005
Date: Fri, 02 Dec 2005 13:12:50 -0700
From: Michael Loftis <mloftis@wgops.com>
To: Dennis Dayman <dennis@thenose.net>, nanog@nanog.org
In-Reply-To: <021501c5f77b$4b6b52d0$027ba8c0@LAPTOP>
X-MailScanner-From: mloftis@wgops.com
Errors-To: owner-nanog@merit.edu
--On December 2, 2005 2:02:15 PM -0600 Dennis Dayman <dennis@thenose.net>
wrote:
>
> Interested, but I see many Sober postings and outages on other lists and
> not here...has anyone been having issues? I know the ISP's are fighting
> the living out of the virus.
I've been seeing a few really large bursts into our mailserver. Not sure
if it's a new variant or a reoccurrence of an old strain. I put in a good
number of new port 25 inbound blocks for infected systems and attempted to
put up a few checks inside of our front end mail servers rather than in the
virus and spam filtering (which happens later for us, so for bad surges we
put a few custom rules up front early in postfix).
Isn't anything we can't handle at this point but it was pretty ugly for a
while there.
