[unisog] Windows Update

Ransel Yoho ransel at net.kent.edu
Fri Aug 15 12:44:22 GMT 2003


> > What are people doing about the future existence, or lack thereof, of
> > Windows Update?

One suggestion on this list was to block traffic to windowsupdate.com.
My colleague, Lloyd Park, came up with the following idea:

Add 'windowsupdate.com' to your local DNS servers with an entry of 127.0.0.1.
This allows one to log the suspect worm's dns request with its real ip address
and turns the DoS from the worm back on to itself.

Ransel Yoho, Kent State University



More information about the unisog mailing list