“…that we all feared might happen someday…”? Where has this chick been? ANYWAY….. Whenever I hear about an email worm going around an infecting people left and right, I kind of chuckle to myself. These are absurdly easy to block, yet no one seems to do it. I’m in charge of all the network operations [...]
Posts Tagged ‘protect’
0day “Here you have” Worm – Prevention at the Gateway
Posted: 10th September 2010 by Matt in code, hacks, news, securityTags: gateway, infect, INPUTMSG, mimedefang, perl, Prevention, protect, rule, rules, script, sendmail, spam, virus, worm
6
File Server LNK Protection
Posted: 22nd July 2010 by Matt in hacks, news, securityTags: bat, block, dll, exe, file, file screening, file server, Linux, LNK, NAS, protect, Protection, Samba, screen, share, spread, Stuxnet, Veto, vulnerability, Windows
I figured I’d throw this out there.. I wanted to make sure that in the event that somehow my network were infected by something that used this vulnerability that it would be limited to an individual machine. Basically, I didn’t want it on my file server. Also, at the bottom of this post I give [...]
ALERT: New virus spreading
Posted: 15th July 2010 by Matt in hacks, news, securityTags: AntiVirus, download, email, exploit, files, firewall, gateway, iptables, mailscanner, mimedefang, network, PREROUTING, protect, rule, scan, security, virus
I was reading the ISC handlers diary today and saw a post entitled “Be on the Alert” The email comes with an attachment.. either a .zip or a .html file. If this is a truly new virus, antivirus will not detect it yet. Here’s what I’ve done to protect my network. 1) Through the use [...]
Synflooding and iptables
Posted: 21st March 2010 by Matt in hacks, securityTags: attack, DoS, firewall, iptables, protect, rules, synflood
So, as I stated in my bio, I love playing with and abusing network protocols. Tonight I was going through some of my old scripts and came across one of my old favourites, ‘synk’. I’ve written synk in a few different languages, with various different versions, but all based on the same concept. TCP+SYN flooding. [...]