RE: To send or not to send 'virus in email' notifications?

["Wesley Vaux" <Wesley.Vaux () globalknowledge com>]

Has anyone else gotten hit by this and know how to stop it? the new dats
from McAffee have not effect....of course...and I can't find a tool
anywhere.  Does anyone have any ideas?

                Wes Vaux, CCNA, CCDA
                Network Security Engineer,
                9000 Regency Pkwy
                Ste 500
                Cary, NC 27511
                t 919.463.6782
                f 919.463.1290

                Global Knowledge
                Experts Teaching Experts
                http://www.globalknowledge.com



-----Original Message-----
From: Daniel Senie [mailto:dts () senie com]
Sent: Wednesday, August 20, 2003 12:37 PM
To: nanog () merit edu
Subject: Re: To send or not to send 'virus in email' notifications?



Notifications from virus scanners is backscatter, just the same as the 
backscatter generated by Smurf attacks. The virus scanners are contributory 
technology in the conduct of a denial of service attack in exactly the same 
way as having directed broadcasts enabled on your routers was (read RFC 
2644 for the details).

Please let's stop building technology that aids in the conduct of DoS
attacks.