RE: To send or not to send 'virus in email' notifications?
At 10:30:43 my systems rebooted after installing hotfix "Windows 2000 Hotfix KB823980 was installed" and machines rebooted. Any ideas on how to remove this or what it may be? Wes Vaux, CCNA, CCDA Network Security Engineer, 9000 Regency Pkwy Ste 500 Cary, NC 27511 t 919.463.6782 f 919.463.1290 Global Knowledge Experts Teaching Experts http://www.globalknowledge.com -----Original Message----- From: Stephen J. Wilcox [mailto:steve@telecomplete.co.uk] Sent: Wednesday, August 20, 2003 10:33 AM To: Joe Maimon Cc: nanog@merit.edu Subject: Re: To send or not to send 'virus in email' notifications? On Wed, 20 Aug 2003, Joe Maimon wrote:
Considering the amount of email traffic generated by responding to forged virus laden email from culprits like sobig should email virus scanning systems be configured to send notifications back to sender or
not? well if you dont tell them they wont know, altho with sobig the return address is false anyhow it would probably be best to cache the sender/virus combinations and send a single message per 7 days Steve
On Wed, 20 Aug 2003, Wesley Vaux wrote:
At 10:30:43 my systems rebooted after installing hotfix "Windows 2000 Hotfix KB823980 was installed" and machines rebooted. Any ideas on how to remove this or what it may be?
http://www.microsoft.com/windows2000/downloads/servicepacks/SP4/HFDeploy.htm... http://www.microsoft.com/windows2000/downloads/servicepacks/SP4/HFDeploy.htm... KB823980 appears to be the patch against DCOM why do you wish to remove it? Steve
Wes Vaux, CCNA, CCDA Network Security Engineer, 9000 Regency Pkwy Ste 500 Cary, NC 27511 t 919.463.6782 f 919.463.1290
Global Knowledge Experts Teaching Experts http://www.globalknowledge.com
-----Original Message----- From: Stephen J. Wilcox [mailto:steve@telecomplete.co.uk] Sent: Wednesday, August 20, 2003 10:33 AM To: Joe Maimon Cc: nanog@merit.edu Subject: Re: To send or not to send 'virus in email' notifications?
On Wed, 20 Aug 2003, Joe Maimon wrote:
Considering the amount of email traffic generated by responding to forged virus laden email from culprits like sobig should email virus scanning systems be configured to send notifications back to sender or
not?
well if you dont tell them they wont know, altho with sobig the return address is false anyhow
it would probably be best to cache the sender/virus combinations and send a single message per 7 days
Steve
participants (2)
-
Stephen J. Wilcox -
Wesley Vaux