NETANN-L Archives

- NETANN-L - Networkmaine Network Announcement List

NETANN-L@LISTS.MAINE.EDU

Options: Use Forum View

Use Monospaced Font
Show HTML Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Jeffrey Letourneau <[log in to unmask]>
Reply To:
- NETANN-L - UNET Technology Services Network Announcement List <[log in to unmask]>
Date:
Tue, 18 Sep 2001 19:15:00 GMT
Content-Type:
multipart/mixed
Parts/Attachments:
text/plain (740 bytes) , text/html (1915 bytes) , message/rfc822 (3978 bytes) , message/rfc822 (2404 bytes)
Boy, this is fun.... not!

I've attached a couple of postings from a listserv I am on for those that are interested.
We are currently seeing very high levels of requests for *.ida, cmd.exe, root.exe readme.eml.
As I mentioned earlier, were are currently blocking incoming http requests that contain the strings listed above.  Looking this far into packets causes quite a load on the routers.  In fact, it brought the router that performs most of the routing for Orono campus to its knees twice this afternoon (causing great pain and suffering for many).  We believe we have struck a balance between router load and filtering at this point so that things should stabilize.  Of course, if the flow increases dramatically again.........

Jeff





ATOM RSS1 RSS2