Sobig.f surprise attack today

Fri Aug 22 21:49:08 UTC 2003

Omachonu Ogali wrote:

>If you're responsible for any of the IPs on the list, better
>permanently remove them from your DHCP pools, IP assignments,
>dial-up pools, or anything else that assigns IP addresses,
>because these will be filtered and forgotten for the next
>200 years.
>  
>
If the virus guys get smarter they´ll put in /24´s or /16´s next time. 
Just scan through
the block with magic cookie until you get the reply you´re looking for 
and start
downloading the update.

Anyone willing to block the whole /16 of their dialup or dsl users if it 
shows up on
an AV vendor´s list?

Pete