Re: [cobalt-developers] /default.ida

["Ryan Verner [festy]" <vernerr@xxxxxxxxxxx>]

IMO isp's should use transparent proxy's, and if any scan is found of this
kind, then some kind of rule is applied, so all net access is denied,
ingoing & outgoing, except for maybe to the ISP's machines, microsoft's
site, and any web access comes up with "You have code red, please patch
this, at <url>, then call us at <number>".

Else we're going to end up with a problem which never ends, and continued
traffic which will cost us all $$$ (even end-users, as higher hosting
service fees ==> higher internet access charges).

Ryan

----- Original Message -----
From: "Pierre Maloka" <pmaloka@xxxxxxxxxxxxxxxxxxxxx>
To: <cobalt-developers@xxxxxxxxxxxxxxx>
Sent: Wednesday, September 19, 2001 2:53 PM
Subject: RE: [cobalt-developers] /default.ida


> Silly virus scans. They are trying to find NT machines to take advantage
of.
> I got hundreds today, and nobody even knows what my website is. I
typically
> get < 10 legit hits a day. I wish there was some way to turn these guys
in.
> I got over 80 requests from "dsl-64-195-90-29.telocity.com" alone.