Gotta Love The Job

[Ignacio]

Yeah, patches and up-to-date, centralized, managed and hopefully gateway antivirus/antispyware.

Yes, we have all that...plus much, much, MUCH more. We don't need help or need to talk details, but thanks.

This is just a case of a serious overreaction.

 

[Bungie]

I beat the internet, the last guy was hard.

 

[GunMD]

The last guy you beat was hard?

 

[Kevin Daly]

The last guy you beat was hard?

...and I bet he beat him long and hard :rofl:

 

[Scab]

It's amazing how seemingly un-related threads really are related after all.

Clickage

 

[Toecutter]

We blocked the malware sites in DNS, which propagates throughout the AD forest

Our AD distributes our antivirus product to new desktops automatically, pushes definitions out, and our router has an optional AV module which we've not yet implemented (testing went sour last year, fixes promised real soon.)

What? :blink: :blink: :blink:

 

[painman]

No no, this cat is right in line....it's a Communist plot and they're all out to get us. PM. <>< :crazy:

 

[Geezer]

OK, let's get back on topic. Iggy broke Google and Yahoo and that took down the internet. Did I get it right? Is the internet still broken?

 

[Bounce]

(Oh, and believe it or not...I'm the Information Assurance Manager* for my organization). Scary, huh?

You know....I think the nimrod in question has that exact same title as you. Besides whether you could take the action he did....if you shut down internet access would you laugh or cry in my position?

I'm in the middle of cubicle ground-zero where all this stuff is taking place...listening to conversations as I type this....and just shaking my head. It's so sad it's actually kinda funny.

blocking those 3 sites isn't taking down "the internet", is it? there are plenty of search engines out there. share the wealth with places like dogpile.com, ask.com and others! same with Yahoo. Who needs to be reading personal e-mail while at work anyway? we block POP3 and FTP traffic through our perimeter firewalls, too. Ya work with the tools they give ya and move on.

I think we're only to five nines on patching. I think he wants nine 9's because it sounds so cool

thank goodness ours go all the way to 11!

[also a Fed and wondering what all the hoo haaa is. ]

 

[GunMD]

blocking those 3 sites isn't taking down "the internet", is it? there are plenty of search engines out there. share the wealth with places like dogpile.com, ask.com and others! same with Yahoo. Who needs to be reading personal e-mail while at work anyway? we block POP3 and FTP traffic through our perimiter firewalls, too. Ya work with the tools they give ya and move on.

Uhhhh. OK. We block mail.yahoo.com so that we can still allow traffic to yahoo.com while preventing the use of Yahoo! mail. No need to block the entire domain just to prevent the use of the webmail. You're right, you DO work w/ the tools they give you. In this case they simply took away tools that are not the source of the problem. Block the malicious / malware sites and allow traffic to the legitimate sites.

.03

 

[Pjturbo]

Most, (99.99%) of managers feel, notice I didn't say think, the need to do something they can tell their boss about. They put no thought what so ever into whether it will be effective or not. They're all show and go is incindental. It's been this way for 50 years that I know of.

Phil

 

[wfooshee]

Yeah, patches and up-to-date, centralized, managed and hopefully gateway antivirus/antispyware.

Yes, we have all that...plus much, much, MUCH more. We don't need help or need to talk details, but thanks.

This is just a case of a serious overreaction.

Yeah, that was my point with the next sentence, implement a strategy and trust it to do its job.

I've always set the start page to Google on machines I install, simply because it's a simple page, no frills, and starts right away, no Flash or sidebars to wait on. I can't imagine the calls "The Internet is gone!" just because some 'expert' blocked it.

Fortunately, in my case I'm the guy that makes those decisions.

 

[FJRChick]

It's work related threads like these that allow me to surf forums on the job thanks guys!

(I'm not the network admin, but this is still technology right?)

 

[Bounce]

I've always set the start page to Google on machines I install, simply because it's a simple page, no frills, and starts right away, no Flash or sidebars to wait on.

i set ours on "BLANK". VERY fast with zero lag time for the user to go where they really wanted to be anyway. we now have a GP that resets all default pages to an internal main web page. on non-work machines i still set it to "blank".

the problem with blocking malware sites only is that those are always changing within the dns structure. from one second to the next a new site can crop up. administrators would never be able to keep up with all the changes. there are fee-based services that can help manage it, but you have to get all that kind of stuff through budget approval and some folks with the money are hard sells for any recurring cost for "something that should be done in house by the people we hired."

not an easy answer no matter which hat you're wearing.

 

[yamaholic]

I work for the largest ISP and telecom company in the world. Hold your guesses, cuz I'm not confessing when the end of the internet will be. And it will be soon. Soon I tell you. Like real soon. Yep. Any day now. Any time. Just hang in there. It will happen. Real soon. I can feel it.



Did you know that the co-inventor of the internet, Vint Serf, works for google now as Chief techno geek? No...the real deal...not an Al Gore. Nice guy, too, I've heard him speak before. His last project before going to google and after leaving my last company was, and I'm not kidding, interplanetary communications. Just in case an AD domain is setup on Mars, say for disaster recovery purposes, rest assured, you can still get connected to earth. Whew! That makes me feel better. My data will be safe there. I can sleep tonight knowing this.

"We blocked the malware sites in DNS, which propagates throughout the AD forest"

Toecutter..what he means is he's used his forum admin god power and found out you've been downloading gigabytes of porn and has a picture of you in created in photoshop jacking off in a wooded area on Utube. Propagate is just a nice way of saying you are still in your reproductive years. He was just hiding behind IT lingo for "security" purposes, heh.

"Our AD distributes our antivirus product to new desktops automatically, pushes definitions out, and our router has an optional AV module which we've not yet implemented (testing went sour last year, fixes promised real soon.)"

And here he's talking about legally hacking into your PC with a virus, documenting the aforementioned porn, spying on you through your USB port , and sending the video capture and porn file list to the authorities (Google, of course). But don't worry, his vendor dropped the ball and they couldn't figure it out...yet. Again, hiding behind IT lingo. Bastage!