[87120] in North American Network Operators' Group
Re: Clueless anti-virus products/vendors (was Re: Sober)
daemon@ATHENA.MIT.EDU (Robert Bonomi)
Sun Dec 4 18:24:50 2005
Date: Sun, 4 Dec 2005 17:24:21 -0600 (CST)
From: Robert Bonomi <bonomi@mail.r-bonomi.com>
To: nanog@nanog.org
Errors-To: owner-nanog@merit.edu
> From owner-nanog@merit.edu Sun Dec 4 17:19:43 2005
> Date: Sun, 04 Dec 2005 15:18:29 -0800
> From: Steve Sobol <sjsobol@JustThe.net>
> To: Rich Kulawiec <rsk@gsp.org>
> Cc: nanog@nanog.org
> Subject: Re: Clueless anti-virus products/vendors (was Re: Sober)
>
>
> Rich Kulawiec wrote:
>
> > And thus we now have blacklist entries such as:
> >
> > barracuda1.aus.texas.net
> > barracuda.yale-wrexham.ac.uk
> > barracuda.morro-bay.ca.us
> > barracuda.ci.mtnview.ca.us
> > barracuda.elbert.k12.ga.us
> > barracuda.fort-dodge.k12.ia.us
> > barracuda.ci.garner.nc.us
> > barracuda.ship.k12.pa.us
> >
> > and many, many more.
>
> Blocking based on rDNS simply because it implies that a certain piece of
> equipment is at that address is... not advisable.
_UNTIL_ the first backscatter arrives from 'that' equipment, that is.
*wry*grin*
