Re: Question reworded

[Edward Chase <echase () STUDENTWEB PROVIDENCE EDU>]

With the student machines, anything is possible.

However we're killing IRC traffic going through our packetshaper execept for
3 or 4 students who requested that they could use IRC.

I believe most of the bots work via IRC.





-----Original Message-----
From: The EDUCAUSE Security Discussion Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Rebecca Ramos
Sent: Thursday, December 16, 2004 3:36 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Question reworded


OK - but my question is - do we have any bots phoning home?


Becky



-----Original Message-----
From: The EDUCAUSE Security Discussion Group Listserv
[mailto:SECURITY () listserv educause edu] On Behalf Of Mike Peterson
Sent: Thursday, December 16, 2004 2:32 PM
To: SECURITY () listserv educause edu
Subject: Re: [SECURITY] Recent Gaobot event

Hi Gary,

We'd definitely be interested in your SNORT sig for bots phoning home;
I'm sure we've got an (un)healthy number of those floating around :-(.

Mike.
--
Mike Peterson -- Network Security Specialist -- U/Toronto Network Operations
E-mail: mikep () noc utoronto ca               WWW: http://www.noc.utoronto.ca/
Tel: 416-978-5230                                          Fax: 416-971-1362

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/groups/.

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/groups/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.