Cybertime Hostmaster wrote:

> The newest rage in viri, Netsky.C, hit one of the machines here.  Just a
> heads up on this little bugger:
> 
> http://www.sarc.com/avcenter/venc/data/[EMAIL PROTECTED]
> 
> It went past the anti-virus until there was an update made specifically
> for it.
> 
> It put 8010 copies of itself on the infected machine.
> 
> And it mass mails like nuts.
> 

Hmm, maybe that explains why my 300 smtpd connections were exhasted from one 
host.  I added it to the firewall yesterday morning about 4:30 AM and here's 
how many times it tried back:
18992 @2 block in quick from 24.0.126.173/32 to any

That's a comcast subscriber network so my subscriber regexp was telling it 
to go away but it only helped to prevent it from sending it's payload not 
using up all available smtpd connections.  It seems that anvil would have 
been a good thing in this case.


-- 
Chris Scott
Host Orlando, Inc
http://www.hostorlando.com/

Reply via email to