On Sat, 2004-07-31 at 16:14, Mike Klinke wrote: > On Saturday 31 July 2004 15:56, Jeff Vian wrote: > > > > Assuming that your FC2 box is also acting as a firewall I'm > > > curious as to how your network machines are getting infected. If > > > you're not running a firewall you may strongly want to consider > > > one. > > > > > > Regards, Mike Klinke > > > > Simple answer -- > > 1) Uneducated users who open everything they get in the mail or by > > instant messaging. > > 2) No virus protection software loaded/not updated. > > > > The firewall would not block mail, and clueless users are the most > > dangerous thing on any network. > > If my memory serves me the msblaster worm spread primarily by way of > the MS bug addressed by: > > http://www.microsoft.com/technet/security/bulletin/MS03-026.mspx > That is the one he said was primary. However, he did say others viruses were in the mix as well. And once it opened the back door from the first machine it could then possibly provide access to outsiders to the entire network. > but you're right that there was a e-mail vector as well. The other > person needs to answer my question above before assuming it's only > due to "stupid users." > I agree that an answer to how the first infection got thru the firewall (and if he has one) is the real issue here. Once the first one was infected the rest are vulnerable because the source is inside any firewall he had. > Regards, Mike Klinke >
