RE: [smartBridges] Virus...*sigh*

[Ole Bj�rklund]

Title: Message

Hi!

 

We use the RADIUS authentication on all of our APPo's and run a freeRADIUS server with the MAC adresses of

all the client radios.  If I want to disable a client i just change the expiry date of the client and within a couple of

minutes the client radio is no longer allowed to associate to the APPo and the client is disabled. 

 

Best Regards

Oleb

 

Snippet from the radius log file after chaning one of the clients expiry date!

Wed Aug 20 09:17:28 2003 : Auth: Login incorrect: [00301a00f52c/00301a00f52c] (from client AirPointPRO port 0)
Wed Aug 20 09:17:30 2003 : Auth: Login incorrect: [00301a00f52c/00301a00f52c] (from client AirPointPRO port 0)
Wed Aug 20 09:17:32 2003 : Auth: Login incorrect: [00301a00f52c/00301a00f52c] (from client AirPointPRO port 0)
Wed Aug 20 09:17:34 2003 : Auth: Login incorrect: [00301a00f52c/00301a00f52c] (from client AirPointPRO port 0)
Wed Aug 20 09:17:40 2003 : Auth: Login incorrect: [00301a00f52c/00301a00f52c] (from client AirPointPRO port 0)
Wed Aug 20 09:17:42 2003 : Auth: Login incorrect: [00301a00f52c/00301a00f52c] (from client AirPointPRO port 0)

 

-----Original Message-----
From: Chris Chance [mailto:[EMAIL PROTECTED]
Sent: 20. august 2003 06:12
To: '[EMAIL PROTECTED]'
Subject: RE: [smartBridges] Virus...*sigh*

Ye SB where is that feature? The everyone except so that we can BLOCK people we don't want on our system specifically? Atleast on the all mighty APPRO's

-----Original Message-----
From: Shawn Mitchell [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 19, 2003 10:38 PM
To: smartBridges

Watch out for abnormal customer usage.  If you can, sniff the packets of
port 25 comming from your wireless network going to the internet and not
your mail server.

This new SoBig.F virus is pretty annoying... multi-threaded spamming
software...  I just reduced network traffic by a couple meg/sec by blocking
some users...

Right now would be a VERY nice time for SB to have the MAC Auth of "Everyone
except xx:xx:xx:xx:xx:xx"  Their still generating traffic, but I'm blocking
them at the edge firewalls...

The PART-15.ORG smartBridges Discussion List
To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname>
To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges)
Archives: http://archives.part-15.org 

** This message does not contain any viruses - scanned by Elektron and Webconnect virusscanner **

** This message does not contain any viruses - scanned by Elektron and Webconnect virusscanner **