Security Guideance

Tue Feb 23 22:13:14 UTC 2010

On Tue, 23 Feb 2010 11:27:21 -1000, Nate Itkin said:
> On Tue, Feb 23, 2010 at 02:46:54PM -0500, Paul Stewart wrote:
> > The problem is that a user on this box appears to be launching high
> > traffic DOS attacks from it towards other sites.
> 
> It's possible the user inadvertently enabled the same exploit after you
> rebuilt the system. I suggest caution with assigning culpability.

Or the gold image used to rebuild was itself vulnerable.  It happens a lot
more often than you think. I'd suggest *lots* of caution with assigning
culpability. ;)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20100223/505367cd/attachment.sig>