It shouldn't...but yes, it does. I mean, come on. For the cost of a $250 PC and a $50 copy of RedHat 9.0 (actually, a recycled PII or PII would do), thrown in front of every access point to the network, they could be blocking every attachment on the Martin Blackstone list!
BAS! -----Original Message----- From: Couch, Nate [mailto:[EMAIL PROTECTED] Sent: Monday, August 25, 2003 12:20 PM To: Exchange Discussions Subject: RE: Sobig.F alert And this surprises you??? > ---------- > From: Blunt, James H (Jim) > Reply To: Exchange Discussions > Sent: Monday, August 25, 2003 1:21 PM > To: Exchange Discussions > Subject: RE: Sobig.F alert > > I was SOOOO disgusted on Friday with our federal government's > anti-virus policy!! > > I had to make a trip over to the passport office in Seattle to get a > new passport for the wife, who was leaving on a 1:23pm flight that day > for Chile. The passport office is an office of the Department of > State. Does the Department of State computer security full under the > jurisdiction of the Office of Homeland Security? One would think so. > > We had just made plane reservations with a credit card, received a > confirmation number, but for some reason the airline couldn't send us > a fax...I'm guessing they had their outside link to the world cut off > for security. > > We get to the passport office on Friday morning, only to have them > tell us that they couldn't process our request with just a > confirmation number, due to the fact that the State Dept.'s computer > network was down due to the Sobig.f virus!!! AAAAArrrggghh!! > > Absolutely disgusting, shoddy, second-rate governmental attitude > strikes again! > > -----Original Message----- > From: Martin Blackstone [mailto:[EMAIL PROTECTED] > Sent: Friday, August 22, 2003 12:47 PM > To: Exchange Discussions > Subject: RE: Sobig.F alert > > > I'm blaming the pizza I just had for the big jump in gas. > > -----Original Message----- > From: Bill Kuhl [mailto:[EMAIL PROTECTED] > Sent: Friday, August 22, 2003 12:39 PM > To: Exchange Discussions > Subject: RE: Sobig.F alert > > Can we blame this virus for the big jump in gas prices today? > > -----Original Message----- > From: Sagert, Lori [mailto:[EMAIL PROTECTED] > Sent: Friday, August 22, 2003 2:18 PM > To: Exchange Discussions > Subject: RE: Sobig.F alert > > > Me too. Oh well, now we can still go the bar after work instead of > staying and fighting viruses all nite. > > -----Original Message----- > From: Christopher Hummert [mailto:[EMAIL PROTECTED] > Sent: Friday, August 22, 2003 3:13 PM > To: Exchange Discussions > Subject: RE: Sobig.F alert > > > This is the most anti climactic virus ever. I want my money back > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Steck, Herb > Sent: Friday, August 22, 2003 12:13 PM > To: Exchange Discussions > Subject: RE: Sobig.F alert > > > Looks like my upstream has killed routes the all of these....way to go > ISP. > > -----Original Message----- > From: Scott Force [mailto:[EMAIL PROTECTED] > Sent: Friday, August 22, 2003 2:09 PM > To: Exchange Discussions > Subject: RE: Sobig.F alert > > > 68.38.159.161 and 65.95.193.138 seem to be the last two standing > unless ICMP is turned off on some of the other servers/pc's. > > > > Because that really wouldn't matter, the theory is that the infect > > machines are going to get their instructions from these 20 masters > > servers and then launch a distributed attack on the root DNS > > servers......1 minute left > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Mellott, > > Bill > > Sent: Friday, August 22, 2003 12:01 PM > > To: Exchange Discussions > > Subject: RE: Sobig.F alert > > > > > > well's that where My q came in....Chris even put up a piece which > > said > > > they new about 20 servers ..18 OFFL, 2 ONL > > > > so then they have ID'd these things right? why not publish the IP > > and/or the domain names ..so people could block these too... it just > > say's about UDP port ..couldnt that also change on the fly? > > > > bill > > > > -----Original Message----- > > From: Steck, Herb [mailto:[EMAIL PROTECTED] > > Sent: Friday, August 22, 2003 2:59 PM > > To: Exchange Discussions > > Subject: RE: Sobig.F alert > > > > > > wouldve been nice for them to publish the IP list so we could block > > it > > > from our firewalls. Incoming and outgoing. > > > > -----Original Message----- > > From: Christopher Hummert [mailto:[EMAIL PROTECTED] > > Sent: Friday, August 22, 2003 1:52 PM > > To: Exchange Discussions > > Subject: RE: Sobig.F alert > > > > > > If only Arnold wasn't running for governor. We could send him back > > in time to stop Skynet. > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Steck, Herb > > Sent: Friday, August 22, 2003 11:52 AM > > To: Exchange Discussions > > Subject: RE: Sobig.F alert > > > > > > As if we all didn't have enough to do? > > > > -----Original Message----- > > From: Matt Plahtinsky [mailto:[EMAIL PROTECTED] > > Sent: Friday, August 22, 2003 1:51 PM > > To: Exchange Discussions > > Subject: RE: Sobig.F alert > > > > > > T-minus 10 minutes ..... Its the end of the world run for your > > lives................... > > > > -----Original Message----- > > From: Sagert, Lori [mailto:[EMAIL PROTECTED] > > Sent: Friday, August 22, 2003 2:41 PM > > To: Exchange Discussions > > Subject: RE: Sobig.F alert > > > > > > Yes it is. Since we are not sure what the payload is, we patched for > > the new MDAC security patch. Hey, who knows? Better to be safe than > > sorry. > > > > T-minus 20 minutes..... > > > > -----Original Message----- > > From: Christopher Hummert [mailto:[EMAIL PROTECTED] > > Sent: Friday, August 22, 2003 2:33 PM > > To: Exchange Discussions > > Subject: RE: Sobig.F alert > > > > > > Oh crap, I didn't think that anyone actually hooked Skynet up to the > > internet. > > > > T-Minus 30 minutes > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Matt > > Plahtinsky > > Sent: Friday, August 22, 2003 11:33 AM > > To: Exchange Discussions > > Subject: RE: Sobig.F alert > > > > > > Here is some more info on it. Should be an interesting afternoon. > > > > http://www.theregister.co.uk/content/56/32475.html > > > > http://story.news.yahoo.com/news?tmpl=story&ncid=1211&e=1&u=/nm/2003 > > 08 > > 22 > > /tc_nm/tech_internet_virus_dc&sid=95573372 > > > > -----Original Message----- > > From: Lori Sagert [mailto:[EMAIL PROTECTED] > > Sent: Friday, August 22, 2003 1:56 PM > > To: Exchange Discussions > > Subject: Sobig.F alert > > > > > > FYI... > > > > http://www.f-secure.com/news/items/news_2003082200.shtml > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mo > > de > > =& > > lang=english > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mo > > de > > =& > > lang=english > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mo > > de > > =& > > lang > > =english > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mo > > de > > =& > > lang=english > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mo > > de > > =& > > lang=english > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > "The information transmitted is intended only for the person or > > entity > > > to which it is addressed and may contain proprietary, confidential > > and/or legally privileged material. Any review, retransmission, > > dissemination or other use of, or taking of any action in reliance > > upon, this information by persons or entities other than the > > intended recipient is prohibited. If you received this in error, > > please contact > > > the sender and delete the material from all computers." > > > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mo > > de > > =& > > lang=english > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mo > > de > > =& > > lang > > =english > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > "The information transmitted is intended only for the person or > > entity > > > to which it is addressed and may contain proprietary, confidential > > and/or legally privileged material. Any review, retransmission, > > dissemination or other use of, or taking of any action in reliance > > upon, this information by persons or entities other than the > > intended recipient is prohibited. If you received this in error, > > please contact > > > the sender and delete the material from all computers." > > > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mo > > de > > =& > > lang > > =english > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mo > > de > > =& > > lang=english > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode > =& > lang=english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > "The information transmitted is intended only for the person or entity > to which it is addressed and may contain proprietary, confidential > and/or legally privileged material. Any review, retransmission, > dissemination or other use of, or taking of any action in reliance > upon, this information by persons or entities other than the intended > recipient is prohibited. If you > received this in error, please contact the sender and delete the material > from all computers." > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode > =& > lang=english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode > =&la > ng > =english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode > =&la > ng > =english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode > =&la > ng > =english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode > =&la > ng > =english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode > =&la > ng=english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]