Re: Nachi Worm apparently causes Live Lock on 4.7 server

2003-08-29 Thread K Anderson
James C. Durham wrote: On 8/21, I noticed that internet connectity through our 4.7 FreeBSD gateway NAT box was getting REALLY slow. Checking with our T1 provider, there was only 128K of data stream (aprox) flowing out the T1. Ping times to the router on the external interface yielded times of

Re: Nachi Worm apparently causes Live Lock on 4.7 server

2003-08-29 Thread paul
James C. Durham wrote: It turned out that we had several Windows boxes in the building that had been infected with the Nachi worm. This causes some kind of DOS or ping probe out onto the internet and the local LAN. Removing the inside interface's ethernet cable caused the ping times on the

Re: Nachi Worm apparently causes Live Lock on 4.7 server

2003-08-29 Thread Matthew Emmerton
James C. Durham wrote: It turned out that we had several Windows boxes in the building that had been infected with the Nachi worm. This causes some kind of DOS or ping probe out onto the internet and the local LAN. Removing the inside interface's ethernet cable caused the ping times

Re: Nachi Worm apparently causes Live Lock on 4.7 server

2003-08-29 Thread paul
Matthew Emmerton wrote: They were doing the same thing at the IBM location where I work. It's brutal if you are in the middle of something, but it's the only way to keep the latest breed of MS virii/worms/whatever from spreading. agreed, but if a small subset of hosts can degrade the network --

Re: Nachi Worm apparently causes Live Lock on 4.7 server

2003-08-29 Thread paul beard
James C. Durham wrote: On Friday 29 August 2003 04:23 am, paul wrote: James C. Durham wrote: It turned out that we had several Windows boxes in the building that had been infected with the Nachi worm. This causes some kind of DOS or ping probe out onto the internet and the local LAN. Removing

Re: Nachi Worm apparently causes Live Lock on 4.7 server

2003-08-29 Thread Jim Durham
On Friday 29 August 2003 01:14 am, paul beard wrote: James C. Durham wrote: On Friday 29 August 2003 04:23 am, paul wrote: James C. Durham wrote: It turned out that we had several Windows boxes in the building that had been infected with the Nachi worm. This causes some kind of DOS or