[unisog] Spyware list

Gene Rackow rackow at mcs.anl.gov
Sat Feb 12 15:40:37 GMT 2005


I checked on a few sites that I know of that appear in that list and
the IP numbers they have listed are not assigned to the university.
Maybe this is spy/spamware that fakes headers as if coming from those
sites?

"Dean De Beer" made the following keystrokes:
 >not to sure why they keep .edus or research site lists for that matter.
 >-----Original Message-----
 >From: Karen A Swanberg <swanberg at tc.umn.edu>
 >Date: Fri, 11 Feb 2005 17:34:46 
 >To:UNIversity Security Operations Group <unisog at lists.sans.org>
 >Subject: Re: [unisog] Spyware list
 >
 >
 >on 02/11/05, at 4:54pm -0500, Dean De Beer wrote:
 >
 >> You can get the full list in a hosts file format here:
 >> http://www.bluetack.co.uk/sqldbadmin/blacklists/spyware.txt
 >
 >And a list of .edus here:
 >http://www.bluetack.co.uk/sqldbadmin/blacklists/edu.txt
 >
 >so their clients can block all .edu traffic?
 >
 >-                                                    -
 >Karen Swanberg | OIT Security and Assurance | U. of Mn
 >-          swanberg at umn.edu | 612-625-8807           -
 >_______________________________________________
 >unisog mailing list
 >unisog at lists.sans.org
 >http://www.dshield.org/mailman/listinfo/unisog
 >_______________________________________________
 >unisog mailing list
 >unisog at lists.sans.org
 >http://www.dshield.org/mailman/listinfo/unisog
 >



More information about the unisog mailing list