Re: [Clamav-users] Ethics Question

2004-06-11 Thread Kelson Vibber
At 08:19 PM 6/10/2004, Bit Fuzzy wrote: At this point we are looking at 2 options. 1) Block offending IP's as they occur. -- Effective, but could be aggravating to potential customers For about a month, we've been adding virus-generating IPs to a local blacklist with a 4-day expiration. It's a c

RE: [Clamav-users] Ethics Question

2004-06-10 Thread Mitch \(WebCob\)
I'd say so. You aren't talking about doing this after the fact, but as the message is received and detected as viral - right? They'd have to have hung up immediately and even then, it's unlikely the modem handshake would be complete yet on the next call ;-) > On Thu, 10 Jun 2004, Nigel Horne wrote

Re: [Clamav-users] Ethics Question

2004-06-10 Thread Bit Fuzzy
Damian Menscher wrote: On Wed, 9 Jun 2004, Tris Forster wrote: With a ridiculous number of Somefools arriving at our server daily I was trying to think of a proactive way do deal with them. One possible solution I came up with was sending winpopups to the offending IP informing them that they ar

Re: [Clamav-users] Ethics Question

2004-06-10 Thread Damian Menscher
On Wed, 9 Jun 2004, Tris Forster wrote: > With a ridiculous number of Somefools arriving at our server daily I was > trying to think of a proactive way do deal with them. > > One possible solution I came up with was sending winpopups to the > offending IP informing them that they are infected (the

Re: [Clamav-users] Ethics Question

2004-06-10 Thread jef moskot
On Thu, 10 Jun 2004, Nigel Horne wrote: > And just hope that the next person to dial in to the ISP who gets that > IP address from DHCP is the same person... If it's done immediately, then the chance of alerting the wrong machine is pretty small, isn't it? Jeffrey Moskot System Administrator [EMA

RE: [Clamav-users] Ethics Question

2004-06-10 Thread Samuel Benzaquen
> > I think the only way I could think is reporting the IP to some DNSBLs. > > That way you can stop receiving their mails and you leave the cleansing > > problem to their ISP. > > And just hope that the next person to dial in to the ISP who gets > that IP address > from DHCP is the same person...

Re: [Clamav-users] Ethics Question

2004-06-10 Thread Nigel Horne
> I think the only way I could think is reporting the IP to some DNSBLs. > That way you can stop receiving their mails and you leave the cleansing > problem to their ISP. And just hope that the next person to dial in to the ISP who gets that IP address from DHCP is the same person... -Nigle --

RE: [Clamav-users] Ethics Question

2004-06-09 Thread Mitch \(WebCob\)
ing experiment... m/ > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of jef moskot > Sent: Wednesday, June 09, 2004 3:50 PM > To: [EMAIL PROTECTED] > Subject: RE: [Clamav-users] Ethics Question > > > On Wed, 9 Jun 2004

Re: [Clamav-users] Ethics Question

2004-06-09 Thread Brian Bruns
On Wednesday, June 09, 2004 6:50 PM [EDT], jef moskot <[EMAIL PROTECTED]> wrote: > > Popping up a message on the machine with the proper IP number of the > source of the infection sounds useful at best and harmless at > worst...but is it really harmless? Could these popups interrupt > running pro

RE: [Clamav-users] Ethics Question

2004-06-09 Thread jef moskot
On Wed, 9 Jun 2004, Mitch (WebCob) wrote: > We are sending this notification as a public service. Please contact > your computer support person or visit one of the many PC Antivirus > providers. Many have free solutions to your problem. That does sound reasonable to me. I wonder if there isn't a

RE: [Clamav-users] Ethics Question

2004-06-09 Thread Mitch \(WebCob\)
to your problem. my 2 cents. m/ > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Samuel > Benzaquen > Sent: Wednesday, June 09, 2004 12:10 PM > To: [EMAIL PROTECTED] > Subject: RE: [Clamav-users] Ethics Question > > > &g

RE: [Clamav-users] Ethics Question

2004-06-09 Thread Don Levey
[EMAIL PROTECTED] wrote: > On Wed, 2004-06-09 at 20:10, Samuel Benzaquen wrote: > >> I think the only way I could think is reporting the IP to some >> DNSBLs. That way you can stop receiving their mails and you leave >> the cleansing problem to their ISP. > > Or simply block the IP with sendmails a

RE: [Clamav-users] Ethics Question

2004-06-09 Thread Kevin Spicer
On Wed, 2004-06-09 at 20:10, Samuel Benzaquen wrote: > I think the only way I could think is reporting the IP to some DNSBLs. > That way you can stop receiving their mails and you leave the cleansing > problem to their ISP. Or simply block the IP with sendmails acces database (or the equivalent f

RE: [Clamav-users] Ethics Question

2004-06-09 Thread Samuel Benzaquen
> Tris Forster > Sent: Wednesday, June 09, 2004 1:02 PM > > While the aim of doing this may be completely honourable, sending > winpopups to a non-firewalled machine stinks of spamming and thus I am > in two minds about putting it into practice You are right. That could be even worst that the

[Clamav-users] Ethics Question

2004-06-09 Thread Tris Forster
Hi all With a ridiculous number of Somefools arriving at our server daily I was trying to think of a proactive way do deal with them. One possible solution I came up with was sending winpopups to the offending IP informing them that they are infected (there's a pretty good chance they'll get thro