Educause Security Discussion mailing list archives
Re: Question regarding Marketscore spyware
From: Chris Allison <AllisoC () MUOHIO EDU>
Date: Fri, 3 Dec 2004 07:35:24 -0500
This morning's vaccine distribution from TippingPoint adds marketscore to the spyware being blocked by their IPA. Chris Allison At 04:31 PM 12/2/2004 -0500, you wrote:
BTW, we've also applied this trick to misdirect access attempts to known phishing sites. When someone is 'successfully' duped into actually clicking the link offered by a phish-mail, they instead get our friendly webpage which describes why one should be suspicious of such emails. Tom Klimek wrote:Packeter class definition: Class ----> Marketscore Protocol--> IP Service --> HTTP Location -> Outside Host List -> Marketscore (containing:) 66.119.33.134 66.119.33.135 66.119.33.136 66.119.33.138 66.119.33.139 66.119.33.166 66.119.33.168 66.119.34.38 66.119.34.39 66.119.34.40 66.119.34.42 66.119.41.71 66.119.41.74 Policy: Never-Admit Web-redirect Tom Klimek Associate Director, Network Engineering University of Notre Dame 204 Security Building Notre Dame, IN 46556 (574) 631-8277 tklimek () nd edu -----Original Message----- From: The EDUCAUSE Security Discussion Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Jeff Kell Sent: Thursday, December 02, 2004 2:42 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] Question regarding Marketscore spyware Gary Dobbins wrote:Same here - works for us. We use Packeteer for the redirect, but same effect.Care to share your class definition? Jeff Kell University of Tennessee at Chattanooga ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/groups/.
-- ------------------------------------------------------------ Gary Dobbins, CISSP -- Director, Information Security University of Notre Dame, Office of Information Technologies ********** Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/groups/.
********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
Current thread:
- Re: Question regarding Marketscore spyware, (continued)
- Re: Question regarding Marketscore spyware Joel Rosenblatt (Dec 02)
- Re: Question regarding Marketscore spyware Dave Monnier, IT Security Office, Indiana University (Dec 02)
- Re: Question regarding Marketscore spyware rwatts (Dec 02)
- Re: Question regarding Marketscore spyware Mike Iglesias (Dec 02)
- Re: Question regarding Marketscore spyware Schultz, Stephen (Dec 02)
- Re: Question regarding Marketscore spyware Joel Rosenblatt (Dec 02)
- Re: Question regarding Marketscore spyware Jeff Kell (Dec 02)
- Re: Question regarding Marketscore spyware Tom Klimek (Dec 02)
- Re: Question regarding Marketscore spyware Gary Dobbins (Dec 02)
- Re: Question regarding Marketscore spyware Scholz, Greg (Dec 02)
- Re: Question regarding Marketscore spyware Chris Allison (Dec 03)
- Re: Question regarding Marketscore spyware Joseph Karam (Dec 03)
- Re: Question regarding Marketscore spyware Eric Pancer (Dec 03)
- Re: Question regarding Marketscore spyware Skrdla, David (Dec 06)
- Re: Question regarding Marketscore spyware Skrdla, David (Dec 21)