[88856] in North American Network Operators' Group
Re: and here are some answers [was: Quarantine your infected users spreading malware]
daemon@ATHENA.MIT.EDU (Jim Segrave)
Tue Feb 21 10:25:41 2006
Date: Tue, 21 Feb 2006 16:25:13 +0100
From: Jim Segrave <jes@nl.demon.net>
To: John Curran <jcurran@istaff.org>
Cc: NANOG <nanog@merit.edu>
Reply-To: jes@nl.demon.net
Mail-Followup-To: Jim Segrave <jes@nl.demon.net>,
John Curran <jcurran@istaff.org>, NANOG <nanog@merit.edu>
In-Reply-To: <p06230901c020c93430b4@[192.168.3.66]>
Errors-To: owner-nanog@merit.edu
On Tue 21 Feb 2006 (08:45 -0500), John Curran wrote:
>
> At 7:45 AM -0500 2/21/06, John Curran wrote:
> >
> >From the web site: "Only a selected set of web sites will remain available, for example Microsoft update and the websites of several anti-virus software companies. The quarantine server tells users what is going on and how this problem can be resolved."
> >
> >One hopes that the Apple web site and online credit form is included in the list... ;-)
>
> Alright, in fairness to MSFT, a pointer to Vista/Longhorn (once available)
> and instructions to only enter your Admin password during bona fide sw
> installations would also go a long way towards preventing recurrence...
> :-)
We have added mutlple sites, including on-line banking sites which are
appropriate to the Netherlands to the list of reachable sites (we also
use this to encourage paying your bills as well as getting people to
fix their machines)
--
Jim Segrave jes@nl.demon.net
