Re: the importance of security

[Jon Mitchiner <jon.mitchiner () GALLAUDET EDU>]

Gary Flynn wrote:

> access-list 120 deny tcp any any eq 25 log
>
> Then check your logs. :)

You'd have quite a lot of false positives unless youre looking for
someone who is sending thousands of e-mails per hour.  Then perhaps
you'd know the person is infected.  The next challenge is you wouldn't
know which virus it has until you physically inspect the machine.
That's difficult if you do not control the machine (e.g. students.)

Normally we like to be able to see what files it's sending so we can
make a record of it indicating that it probably has Beagle to make it
easier for the clean-up team. :)

Jon Mitchiner
Gallaudet University

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.