Full Disclosure mailing list archives

RE: SoBig.F strange problem


From: "Schmehl, Paul L" <pauls () utdallas edu>
Date: Wed, 20 Aug 2003 10:04:19 -0500

-----Original Message-----
From: Stephen Clowater [mailto:steve () stevesworld hopto org] 
Sent: Wednesday, August 20, 2003 9:26 AM
To: full-disclosure () lists netsys com
Subject: Re: [Full-disclosure] SoBig.F strange problem

I started getting 1000-2000 an hour yesterday, I just went to 
all the border routers and put a filter on 25 to drop those 
connections and send a notice to the From feild of the smtp 
query, and a QUIT to the mailserver it was connecting to.

Gee, thanks Steve.  In addition to all the stupid virus gateways we have
to contend with your mail too.  It's nice that you're so skilled, but
did you ever stop to think that you're sending mail to the wrong person?

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/ 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: