Re: Virus-infected hosts list

2003-10-05 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, Oct 04, 2003 at 11:27:52AM -0600, Jacob Anawalt wrote: > So you're just keeping a list of problem IP's and accepting additional > traffic from them, or do they have to use another IP address to mail the > "Disinfected, thanks" email to? I fo

Re: Virus-infected hosts list

2003-10-04 Thread Jacob Anawalt
Paul Johnson wrote: [snip] Tommorrow someone else will be assigned those same IPs and you'll be blocking them even if they were never vulnerable to begin with. If it's a problem, they email me, and I pull the IP. So you're just keeping a list of problem IP's and accepting additional traf

Re: Virus-infected hosts list

2003-10-04 Thread Michael C.
In linux.debian.user, Paul Johnson <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On Sat, Oct 04, 2003 at 05:43:42AM -0400, Michael C. wrote: > > You realize of course that probably 60-70% are dynamic IPs. For example: > > > > 212.216.176.206 212.216.176.221

Re: Virus-infected hosts list

2003-10-04 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, Oct 04, 2003 at 11:19:56AM +0100, Colin Watson wrote: > > You realize of course that probably 60-70% are dynamic IPs. > > And why exactly are people sending mail from dynamic IPs rather than > using their ISP's smarthost or similar? I only se

Re: Virus-infected hosts list

2003-10-04 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, Oct 04, 2003 at 05:43:42AM -0400, Michael C. wrote: > You realize of course that probably 60-70% are dynamic IPs. For example: > > 212.216.176.206 212.216.176.221 212.216.176.222 212.216.176.223 > 212.216.176.224 212.227.126.251 > > Are probab

Re: Virus-infected hosts list

2003-10-04 Thread Colin Watson
On Sat, Oct 04, 2003 at 05:43:42AM -0400, Michael C. wrote: > In linux.debian.user, > Paul Johnson <[EMAIL PROTECTED]> wrote: > > I've started a virus infected hosts list that is net-lsearchable. > > It's available at http://ursine.ca/~baloo/ and is updated w

Re: Virus-infected hosts list

2003-10-04 Thread Michael C.
In linux.debian.user, Paul Johnson <[EMAIL PROTECTED]> wrote: > I've started a virus infected hosts list that is net-lsearchable. > It's available at http://ursine.ca/~baloo/ and is updated when I get > more virus infected email or requests for removal. If I get a lo

Virus-infected hosts list

2003-10-03 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've started a virus infected hosts list that is net-lsearchable. It's available at http://ursine.ca/~baloo/ and is updated when I get more virus infected email or requests for removal. If I get a lot of interest, I might make an RBL