full-disclosure - [fd] Re: SoBig.F strange problem

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: mike at blakogre.com (Mike Vasquez)
Subject: [fd] Re: SoBig.F strange problem

Hrm.  So you send emails to the sender, when the sender was forged, creating
more unnecessary traffic.

----- Original Message ----- 
From: "Stephen Clowater" <steve@...vesworld.hopto.org>
To: <full-disclosure@...ts.netsys.com>

> I started getting 1000-2000 an hour yesterday, I just went to all the
border
> routers and put a filter on 25 to drop those connections and send a notice
to
> the From feild of the smtp query, and a QUIT to the mailserver it was
> connecting to.
>
> I'd recomend doing this, its easy to do in freeBSD, all my borders are
>  freeBSD so I havent tried it on anything else yet :)

Hrm.  Substitute Windows for freeBSD and this is the same flawed argument
that people claim MCSE's make.

Just because it's easy to do, doesn't mean some thought isn't required.

Maybe *nix admins are human after all.