bugtraq - Re: AV "feature" does more DDoS than Sobig

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1062088188.20680.19.camel@gradius.office.cam.uk.worldpay.com>
Date: 28 Aug 2003 17:29:48 +0100
From: James Greenhalgh <james.greenhalgh@...ldpay.com>
To: Vladimir Parkhaev <vladimir@...bas.net>
Cc: William Warren <hescominsoon@...lphia.net>,
   Fabio Gomes de Souza <bugtraq@....com.br>, bugtraq@...urityfocus.com,
   full-disclosure@...ts.netsys.com
Subject: Re: AV "feature" does more DDoS than Sobig


On Thu, 2003-08-28 at 16:16, Vladimir Parkhaev wrote:
> Quoting William Warren (hescominsoon@...lphia.net):
> > this is the very reason i block all executables at my firewall...plus it 
> > reduces the load on my workstations from having to scan all that 
> > garbage..<G>
> 
> firewall? the best place to block IMHO will be on mail gateways
> ( you can bounce it with a nice message like 'atttachements of this
> type are not welcome here' )....

Which considering the subject of this thread is particularly amusing.
AV software sending back too many "you have a virus" warnings?  No
problem!  Just send them directly from the mail gateway instead, it will
make a huge difference ;-)
 
--
James Greenhalgh <james.greenhalgh@...ldpay.com>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html