[unisog] New Virus?

Anderson Johnston andy at umbc.edu
Wed Sep 10 20:01:59 GMT 2003


How spoofed?  We do egress filtering for anything leaving that is not from
our /16 network.  Will it pick addresses from the same /16 or /24 subnet?

					- andy

On Wed, 10 Sep 2003, Stephanie Hagopian wrote:

> - The victims connect to an IRC server and begin issuing DDOS commands
> using spoofed IPs.

------------------------------------------------------------------------------
** Andy Johnston (andy at umbc.edu)          *            pager: 410-678-8949  **
** Manager of IT Security                 * PGP key:(afj2002) 4096/8448B056 **
** Office of Information Technology, UMBC *   4A B4 96 64 D9 B6 EF E3 21 9A **
** 410-455-2583 (v)/410-455-1065 (f)      *   46 1A 37 11 F5 6C 84 48 B0 56 **
------------------------------------------------------------------------------



More information about the unisog mailing list