Network administration over the holidays



Nobody wants to be tied to their job over the holidays, but what if someone has hacked your servers and is using your machine to scam thousands of people a day? Does that keep for two weeks? Does someone monitor the abuse address? Incidents.org has a post on messages they’ve got from some reporting to abuse administrators receiving back vacation notices that things are basically on “autopilot until sometime next year.”


They also have some other reminders which I know I need to refresh my memory on…

Unless you turn off the systems, they will still need a bit of watching and caring. Do you have someone on call in case the burglar alarm goes off? Make sure you have someone checking the ‘abuse’ or ‘security’ mailboxes once a day (at least). You may have them even forwarded to a pager if you can filter the spam.

And while I am on the topic: Make sure you do actually have an ‘abuse’ and a ‘security’ alias for all of your domains. There are a number of aliases you should define for each of your domains:

RFC2142 provides a number of references to other RFCs, and suggests the following aliases:

postmaster@domain (RFC822). This should exist on all mail servers. You should also have postmaster@IP-Address-of-the-mail-server.
usenet@domain (RFC977). I know a lot of people will write to say differently. But I consider usenet dead for all practical purposes. You can probably do without this address.
abuse@domain
trouble@domain
noc@domain
security@domain
Take a look at your domain name and IP address whois entries and make sure they are current. For IP addresses, you may just find your ISPs contact info, which is fine as long as they notify you.

Spam to these addresses has become a problem. I don’t think there is a great solution, as some of the mail sent to these mail boxes may include copies of spam messages (even if you don’t send them, others may impersonate you and you still want to know. Abuse reports are one way you will find out).

That much said, if you’ve got all the bases covered, good for you. I think I need to make sure all the required addresses are aliased on the domains I control. Also, I hope that the holidays can be a quiet time that you don’t HAVE to go chasing problems, or respond to abuse messages….

Related Posts

Blog Traffic Exchange Related Posts
  • Network Security - Defenses against arp spoofing So, we've spent a couple articles talking about arp spoofing. It sounds really bad, it's a frighteningly easy way to do a "mitm" or man in the middle attack and anyone using arp spoofing could capture ALL network traffic including passwords. There's got to be an easy fix right? Um..........
  • What a week.... I think it's time to pass along a long story of what's gone on over the last week or so here and some of the reasons there hasn't been anything posted. Generally, I would say that work has been busy, but something happened last week that went a bit beyond......
  • Modern Computer Viruses are almost NEVER from whom they claim to be from This is one that I've probably talked about before, but it's worth rehashing because of a call I had this afternoon. A customer had been receiving phone calls and email messages from folks asking that he stop sending them a virus. Essentially all of the viruses were claiming to be......
Blog Traffic Exchange Related Websites
  • MonaVie is Trying to Sue Me... ... and I couldn't be happier about it. For those who don't know, MonaVie is a juice, that retails for $1.70 an ounce (yes ounce). Being the consumer advocate that I am, I wrote that I think MonaVie is a scam since it's around $1500-$2000 a year per person and......
  • Do babies go to heaven when they die? Do babies go to heaven when they die: Before we can answer this question we have to put aside any preconceived notions or biases. We must acknowledge that there are a number of different potential answers to this question, some less pleasing than others. To answer this question honestly, we......
  • What is a Domain Name? A domain name is a Web address, such as godaddy.com, that is linked to an IP address (which represents a physical point on the Internet). When someone types a domain name into a Web browser, the requested Web page displays. A domain name consists of a top-level and a......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site