From: Debra Bartling (debrab_at_uclink.berkeley.edu)
Date: Wed Aug 27 2003 - 09:58:09 PDT
At 11:12 AM 8/26/2003 -0700, Craig Lant wrote:
>We are proposing a change in our procedures to handle this particular
>problem. We would like to send another CalMail warning to all faculty,
>staff, and students explaining that we need to begin immediately blocking
>computers that are found to be infected and attacking other
>computers. We'll still send individual notifications to security contacts
>as hosts are blocked. But, we would no longer allow infected computers to
>continue attacking others for a day or two before taking action.
I'm in support of just about anything you want to do to get the problem
under control. But need to know the procedure to find out which hosts are
blocked and how to get them unblocked when they are fixed. The first
information I had about any hosts being blocked at all was in Jon Forrest's
message asking if there was a web page to look up this information. (An
excellent suggestion!)
Debra Bartling
------------------------------------------------------------------------
The following was automatically added to this message by the list server:
For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.berkeley.edu/>.
This archive was generated by hypermail 2.1.5 : Wed Aug 27 2003 - 11:20:56 PDT