RE: FBI tells the public to call their ISP for help

["Frank Bulk" <frnkblk () iname com>]

The Billy Goat product only seems to detect and notify nefarious activity,
but it does nothing for the owned clients.

I want something that restricts my owned subscribers to downloading updates
and tools while preventing them from spewing forth more spam and the like.
Mirage Networks is the closest to it, from my limited knowledge.

Frank

-----Original Message-----
From: Jeroen Massar [mailto:jeroen () unfix org] 
Sent: Saturday, June 16, 2007 9:43 PM
To: frnkblk () iname com
Cc: 'Sean Donelan'; nanog () nanog org
Subject: Re: FBI tells the public to call their ISP for help

Frank Bulk wrote:
> Let me buy an appliance that handles that
> DNS/filtering/firewalling/updating/etc for owned machines, one that has
> MSFT's blessing, and that just requires policy-based routing and handing
out
> special DNS server IPs.

Please see one of:
http://domino.research.ibm.com/comm/pr.nsf/pages/news.20060327_virus.html
http://www.informationweek.com/story/showArticle.jhtml?articleID=14200013
http://www.ercim.org/publication/Ercim_News/enw56/riordan.html

and various others. Billy Goats can do exactly at least the jailing part
and most likely there are other similar services that provide the same
functionality. The upgrade portion really depends on the installed
software base of course. Without somebody actually doing the upgrade and
most likely not even removing the virus/bot etc in place, not much can
be done in that area, especially in non-ISP environments where you don't
have root on the PC. This portion at least quarantines the box and then
allows you to simply instruct the user in the common methods of battling
the problem that the user has.

Greets,
 Jeroen