 (8.9.1/8.9.1) with ESMTP id LAA22794	for ; Wed, 7 Apr 2004 11:06:47 -0700 (PDT) Received: from ucsb.edu (hub.ucsb.edu [128.111.24.40])	by charm.physics.ucsb.edu (8.9.3/8.9.3) with ESMTP id LAA18903	for ; Wed, 7 Apr 2004 11:06:46 -0700 Received: from localhost ([127.0.0.1] helo=hub.ucsb.edu)	by ucsb.edu with esmtp  id 1BBHRm-000CVe-E0; Wed, 07 Apr 2004 11:06:46 -0700 Received: from hub.ucsb.edu ([128.111.24.40] helo=smtp.ucsb.edu)	by ucsb.edu with esmtp TLSv1:AES256-SHA:256 id 1BBHRM-000CVY-HB	for csf@ucsb.edu; Wed, 07 Apr 2004 11:06:20 -0700 Received: from security3.oit.ucsb.edu ([128.111.12.28])	by smtp.ucsb.edu with asmtp TLSv1:RC4-SHA:128 id 1BBHRM-000CVR-6o for csf@ucsb.edu; Wed, 07 Apr 2004 11:06:20 -0700 Mime-Version: 1.0 (Apple Message framework v613) Content-Transfer-Encoding: 7bit Message-Id: <44D060D0-88BE-11D8-A240-000A95BC7718@UCSB.edu> Content-Type: text/plain; charset=US-ASCII; format=flowed To: csf@ucsb.edu From: E. Todd Atkins  Date: Wed, 7 Apr 2004 11:06:18 -0700 X-Mailer: Apple Mail (2.613) Subject: [CSF] Blocked Hosts X-BeenThere: csf@ucsb.edu X-Mailman-Version: 2.1.4 Precedence: list List-Id: Computer Support Forum  List-Unsubscribe: ,	 List-Archive:  List-Post:  List-Help:  List-Subscribe: ,	 Sender: csf-bounces@ucsb.edu Errors-To: csf-bounces@ucsb.edu Hello, You can find a "Filtered Hosts" list further down in this message. If your host is in this list, then .. 1. Make sure that the host has been completely cleaned up. Unless the host is completely rebuilt, please make sure that the host is not running any rogue IRC bots, FTP servers, VNC, etc. Tools like "tcpview" and "procexp" from www.sysinternals.com or Vision from www.foundstone.com (under the Resources section) should help to locate any such services. 2. Send an email message to security@ucsb.edu to inform us that the host is now safe to be connected with the internet. When referring to multiple IP addresses, please list the IP addresses on separate lines. If you are not the NOC's official network contact for the address(es), then be sure to CC that person. If you decide to simply reply to this message, please do *not* include the complete lists of IPs. Please just include the IP(s) that you are writing to us about. 3. If you find any rogue services running, please include the type of service and the port that it was using. *** Filtered Hosts *** 128.111.20.92   dhcp20-92.wirelesstest.ucsb.edu 128.111.23.18   quasar.deepspace.ucsb.edu 128.111.31.133  -- 128.111.54.201  kalabaw.cs.ucsb.edu 128.111.68.13   -- 128.111.74.134  -- 128.111.82.58   phish.chemengr.ucsb.edu 128.111.82.132  seppia.chemengr.ucsb.edu 128.111.82.140  peleg.chemengr.ucsb.edu 128.111.103.21  otter.opl.ucsb.edu 128.111.103.26  kingfish.opl.ucsb.edu 128.111.103.29  trout.opl.ucsb.edu 128.111.103.49  -- 128.111.103.54  -- 128.111.104.131 gdhcp131.geog.ucsb.edu 128.111.107.125 lab25.geog.ucsb.edu 128.111.116.48  -- 128.111.131.118 host131-118.lsdepts.ucsb.edu 128.111.142.221 -- 128.111.159.81  -- 128.111.164.39  jfks-dell.materials.ucsb.edu 128.111.184.244 -- 128.111.185.75  inti.ece.ucsb.edu 128.111.192.110 mbe-1239c.ece.ucsb.edu 128.111.192.254 -- 128.111.206.8   -- 128.111.234.239 sylvey.geog.ucsb.edu 128.111.247.63  -- -- Todd Atkins Network Security Coordinator UCSB/Office of Information Technology Voice: (805) 893-5077 Fax: (805) 893-5051 http://www.oit.ucsb.edu/security _______________________________________________ CSF mailing list  -  CSF@ucsb.edu https://ucsb.edu/mailman/listinfo/csf