nanog mailing list archives
Re: DDoS Question
From: Sean Donelan <sean () donelan com>
Date: Thu, 27 Sep 2007 23:42:39 -0400 (EDT)
On Thu, 27 Sep 2007, Martin Hannigan wrote:
They randomize the name on the subject line. Is this any particular virus/malware/zombie signature
Nothing particularly new. The Bots have been pumping this one out for at least a month, although the subject line has a few variations besides just changing the name. I guess they just finally got around to you.
and any suggestion on how to defend against it besides what I'm already doing (which is all of the obvious, rbls, spam appliances, hot cocoa, etc.)?
See all the previous mail threads about ISPs not doing anything :-) Stop the bots on your networks; work with people to stop the bots on other networks; work with law enforcement to put the criminals in prison. In the mean time, continue to spend on resources to mail servers, security appliances, and more blacklists.
Current thread:
- DDoS Question Martin Hannigan (Sep 27)
- Re: DDoS Question Ken Simpson (Sep 27)
- Re: DDoS Question Roland Dobbins (Sep 27)
- Re: DDoS Question Tony Finch (Sep 28)
- Re: DDoS Question Ken Simpson (Sep 28)
- RE: DDoS Question Raymond L. Corbin (Sep 27)
- Re: DDoS Question Martin Hannigan (Sep 27)
- Re: DDoS Question Matthew Sullivan (Sep 29)
- Re: DDoS Question Sean Donelan (Sep 27)
- <Possible follow-ups>
- Re: DDoS Question Paul Ferguson (Sep 27)
- Re: DDoS Question Hex Star (Sep 27)
- Re: DDoS Question Paul Ferguson (Sep 27)
- Re: DDoS Question Martin Hannigan (Sep 28)
- ISP support for Email (was Re: DDoS Question) Sean Donelan (Sep 28)
- Re: DDoS Question Martin Hannigan (Sep 28)
- Re: DDoS Question Ken Simpson (Sep 27)