[c-nsp] Annoying POPups
Hi, I have a group of ips on my network a /24 that when browsing are getting an annoying popup across the browser. This strange behaviour started last week when the same block could not access any http site. Later the problem resolved itself so I thought till today. Now the block can browse but the annoying pop up pops everytime the page is refreshed and browsing is annoyingly. Any advise assistance on how I can trace the loophole on my network and rectify will be much appreciated. Rocker. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] Annoying POPups
Well am thinking its kind of an attack since its the whole network. Reason when I assign myself an ip on that range and check my ip address from what is my ip. It gives me the ip address of my cisco router. where that ip range is from. Appreciate any input. On Tue, Feb 10, 2009 at 3:19 PM, Church, Charles cchur...@harris.comwrote: This isn't really Cisco related, but I'm guessing they're all infected with some kind of virus or spyware. Make sure they're all patched (guessing they're Windows), then run something like AdAware or Spybot SD on them to clean it up. Then install Firefox on all machines. Chuck -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Rocker Feller Sent: Tuesday, February 10, 2009 7:11 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Annoying POPups Hi, I have a group of ips on my network a /24 that when browsing are getting an annoying popup across the browser. This strange behaviour started last week when the same block could not access any http site. Later the problem resolved itself so I thought till today. Now the block can browse but the annoying pop up pops everytime the page is refreshed and browsing is annoyingly. Any advise assistance on how I can trace the loophole on my network and rectify will be much appreciated. Rocker. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] Annoying POPups
Rocker Feller wrote: Hi, I have a group of ips on my network a /24 that when browsing are getting an annoying popup across the browser. This strange behaviour started last week when the same block could not access any http site. Later the problem resolved itself so I thought till today. This sounds like virus/spyware on the host or browser. Does it happen to a Mac or Linux box running Firefox? Now the block can browse but the annoying pop up pops everytime the page is refreshed and browsing is annoyingly. Any advise assistance on how I can trace the loophole on my network and rectify will be much appreciated. Don't use Windows/IE/Outlook. If you must, patch often and use antivirus software. Ideally, take those hosts off of your network until they're disinfected. In any case don't move them to another subnet until they're disinfected. -- Jay Hennigan - CCIE #7880 - Network Engineering - j...@impulse.net Impulse Internet Service - http://www.impulse.net/ Your local telephone and internet company - 805 884-6323 - WB6RDV ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] Annoying POPups
No NAT these are all public ips. Router 2811 is the terminating point for all these ips which come in on vlans on different subinterfaces. Customers connect to me via this router and I have issued them public ips. This router is connected direct to my uplink (Internet) provider. Rocker On Tue, Feb 10, 2009 at 6:20 PM, Jay Hennigan j...@west.net wrote: Rocker Feller wrote: Well am thinking its kind of an attack since its the whole network. Reason when I assign myself an ip on that range and check my ip address from what is my ip. It gives me the ip address of my cisco router. where that ip range is from. Is your Cisco router performing NAT? If so, this is normal. -- Jay Hennigan - CCIE #7880 - Network Engineering - j...@impulse.net Impulse Internet Service - http://www.impulse.net/ Your local telephone and internet company - 805 884-6323 - WB6RDV ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
