sasser virus (was Re: [unisog] student fees for cleaning.)

Peter Van Epp vanepp at sfu.ca
Fri May 7 21:47:15 GMT 2004


On Fri, May 07, 2004 at 02:36:16PM -0700, Peter Moody wrote:
> > Ports 135-139, 445, 5554, 9996,
> > and 31337 are all blocked at the border, between our res hall network
> > and our admin network, and between our dial-ups and wireless network and
> > our admin network. 
> 
> do you guys not have folks bringing machines home and then back to
> campus?
> 
> we've got all those ports blocked at our entrance as well and we've
> still seen lots of infections.
> 
> -Peter
> 
> -- 
> Peter Moody                             <peter at ucsc.edu>
> Information Security Administrator      831/459.5409
> Communications and Technology Services. UC, Santa Cruz.
> http://security.ucsc.edu/pgp/peter.moody.pub
> :wq

	Yep we have dialin modems, wireless and lots of mobile laptops. I 
believe those are where the infections we have seen originated. The few I've
seen seemed to be scanning off our net, so perhaps we have just so far been
lucky and none of the infections have started out scanning  on the local net.


Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada




More information about the unisog mailing list