North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: To send or not to send 'virus in email' notifications?

  • From: Wesley Vaux
  • Date: Wed Aug 20 16:44:45 2003 
Has anyone else gotten hit by this and know how to stop it? the new dats
from McAffee have not effect....of course...and I can't find a tool
anywhere.  Does anyone have any ideas?

		Wes Vaux, CCNA, CCDA
		Network Security Engineer,
		9000 Regency Pkwy
		Ste 500
		Cary, NC 27511
		t 919.463.6782
		f 919.463.1290

		Global Knowledge
		Experts Teaching Experts
		http://www.globalknowledge.com



-----Original Message-----
From: Daniel Senie [mailto:[email protected]]
Sent: Wednesday, August 20, 2003 12:37 PM
To: [email protected]
Subject: Re: To send or not to send 'virus in email' notifications?



Notifications from virus scanners is backscatter, just the same as the 
backscatter generated by Smurf attacks. The virus scanners are contributory 
technology in the conduct of a denial of service attack in exactly the same 
way as having directed broadcasts enabled on your routers was (read RFC 
2644 for the details).

Please let's stop building technology that aids in the conduct of DoS
attacks.