Arjen, Sadly I don't think that would achieve anything. Typically infected computers only send out their payload once, so the security team would be wasting their valuable time shutting a stable door when the horse was well and truly bolted. And then they would have to spend more time dealing with the inevitable request to reopen it (even if they refuse the request it still takes time). Bob On Tue, 2 Mar 2004, Arjen Runsink wrote:
Hi.
Can't you block the IP's that send the virii?
BB, Arjen
-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here
============================================================== Bob Vickers R.Vickers@cs.rhul.ac.uk Dept of Computer Science, Royal Holloway, University of London WWW: http://www.cs.rhul.ac.uk/home/bobv Phone: +44 1784 443691