Re: The home user problem returns

[ant () notatla org uk (Antonomasia)]

From: mason () schmitt ca


Those sound like good ideas.
                                                                          
> Getting away from people oriented approaches now.  I'm planning to setup a
> "leper colony" (kudos to whomever coined that term.  I also hope I'm not
> offending anyone...).  The idea is simply to quarantine obviously infected
> machines from the rest of our network, and preferably from other members

There should be a charge for each occurrance of this.  Give it a more acceptable
name and teach the customers it's a service like towing their car out of a ditch.


> immediately upon seeing spam from a spam zombie - even if
> the zombie is attempting to relay through our smarthost
> as opposed to the usual direct-to-mx spam zombie activity.

That should be easy to detect according to Richard Clayton.
         http://www.cl.cam.ac.uk/users/rnc1/extrusion.pdf
see also http://www.cl.cam.ac.uk/users/rnc1/incoming.pdf



And in another mail:
> Marcus and most of the rest of you, please keep preaching solid security
> principles to businesses and governments,

On a good day they pay twice as much attention as the home users.

I could make a game of writing down things that happen at work and people
guessing which ones are true.


-- 
##############################################################
# Antonomasia   ant notatla.org.uk                           #
# See http://www.notatla.org.uk/                             #
##############################################################
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards