Security Incidents mailing list archives

Re: Template Admin Notification


From: "Robert G. Ferrell" <root () rgfsparc cr usgs gov>
Date: Wed, 24 Jan 2001 12:56:57 -0600

Does anyone on the list have a default template email they use to notify
admins of attacks from their networks?

Well, mine's not very elaborate, but here it is anyway:

=======================================================

Hi there,

Looks like someone in your network (unless this is a spoofed
IP address) is being naughty.  I'd appreciate it if you could
look into and put a stop to it, if possible. If it matters to you,
attempted intrusion into or interference with the operations of
a U.S. government computer system is a violation of U.S.
federal law (18 USC 1030, et al.).

[insert applicable log entries here]

Thanks for your cooperation.

============================================================

That's the official one I use at work.

At home I'm a little more succinct:

"Move it or lose it."

Cheers,

RGF

Robert G. Ferrell, CISSP
Information Systems Security Officer
National Business Center
U. S. Dept. of the Interior
Robert_G_Ferrell () nbc gov
========================================
 Who goeth without humor goeth unarmed.
========================================


Current thread: