RE: Nimda virus and whois search...

2001-10-01 Thread Einar Stefferud
Holder is a good name for the holders of IP addresses. Also, RAND can be very Reasonable without hurting the cause of freedom. But some people are not reasonable, but this is a different problem, and is unlikely to be resolved in our favour by reasonable people. Cheers...\Stef PS: If IP addres

RE: Nimda virus and whois search...

2001-10-01 Thread Francois Menard
> Seriously, what is the appropriate term: owner, rentee, leaser ? Assignee? -=Francois=-

RE: Nimda virus and whois search...

2001-09-30 Thread Joel Jaeggli
expressed in this e-mail may not be necessarily > the views of SOPAC. > > > > -Original Message- > From: Bob Braden [mailto:[EMAIL PROTECTED]] > Sent: Monday, 1 October 2001 3:33 > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: Re: Nimda virus and whois searc

RE: Nimda virus and whois search...

2001-09-30 Thread Franck Martin
PROTECTED]; [EMAIL PROTECTED] Subject: Re: Nimda virus and whois search... *> *> While I was implementing a perl script to catch nimda virus on Apache *> (www.digitalcon.ca/nimda/) and send an e-mail to the owner of the IP, I It will come as a great surprise to many people to learn th

Re: Nimda virus and whois search...

2001-09-30 Thread Bob Braden
*> *> While I was implementing a perl script to catch nimda virus on Apache *> (www.digitalcon.ca/nimda/) and send an e-mail to the owner of the IP, I It will come as a great surprise to many people to learn that someone owns IP. At one point, some eager beavers in the US government thou

Re: Nimda virus and whois search...

2001-09-30 Thread Valdis . Kletnieks
On Sun, 30 Sep 2001 13:35:14 +0300, Pekka Savola said: > - users running traceroute, on incomoing icmp time exceeded messages > triggering an icmp flood "detection" > - using a public ftp server, thus generating an ident query > - using an smtp server, -""- > - etc. My personal pet peeve - ge

RE: Nimda virus and whois search...

2001-09-30 Thread Franck Martin
1 October 2001 3:55 To: Franck Martin Subject: Re: Nimda virus and whois search... Please seriously consider not sending automated email in this way. You're not making matters better by creating a storm of email messages in addition to an already existing storm of HTTP queries. Your resp

Re: Nimda virus and whois search...

2001-09-30 Thread Pekka Savola
On 30 Sep 2001, Franck Martin wrote: > If there was some kind of standard, it would help fighting worms by > informing IP owners that some machines have been infected. It would also > help all Intrusion detection System to inform system administrator of > potential attacks with a detailed report..

Nimda virus and whois search...

2001-09-30 Thread Franck Martin
While I was implementing a perl script to catch nimda virus on Apache (www.digitalcon.ca/nimda/) and send an e-mail to the owner of the IP, I realised it is rather difficult to automatise whois searches. First of all there are 3 repositories of IP networks: ARIN, APNIC and RIPE. There is no who