You're correct. We never used windowsupdate.com for anything, none of our stuff points to it at all - it was only a redirect site. There was a redirect in place going from windowupdate.com to windowsupdate.microsoft.com up until about 9pm NZ time last night. Cheers Nathan -----Original Message----- From: Simon Byrnand [mailto:simon(a)igrin.co.nz] Sent: Saturday, 16 August 2003 9:33 a.m. To: Kerry Thompson Cc: NZ NOG Subject: RE: [nznog] blaster worm
windowsupdate.com has been pulled my MS. See
http://slashdot.org/article.pl?sid=03/08/15/1730200&mode=thread&tid=109& tid=126&tid=172&tid=187
I believe they've shifted to windowsupdate.microsoft.com
I wouldn't say they've "shifted" to windowsupdate.microsoft.com. As far as I'm aware, thats always been the actual URL of windows update pretty much since day one. I've been using windowsupdate.microsoft.com as the URL for years now.... Maybe they had a redirection page at windowsupdate.com or just mirrored that URL as well. If the worm really targets windowsupdate.com and not windowsupdate.microsoft.com then the worm author isn't as smart as they'd like to think they are :) (big surprise there huh....) Regards, Simon _______________________________________________ Nznog mailing list Nznog(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog
Nathan,
Are you aware of microsoft being affected from the DDoS of this virus yet?
Seeing as you people will probably hear first off.
P.S. I dont want you to loose your job so you can mail me off list if you
like :)
Barry
----- Original Message -----
From: "Nathan Mercer"
windowsupdate.com has been pulled my MS. See
http://slashdot.org/article.pl?sid=03/08/15/1730200&mode=thread&tid=109& tid=126&tid=172&tid=187
I believe they've shifted to windowsupdate.microsoft.com
I wouldn't say they've "shifted" to windowsupdate.microsoft.com. As far as I'm aware, thats always been the actual URL of windows update pretty much since day one. I've been using windowsupdate.microsoft.com as the URL for years now.... Maybe they had a redirection page at windowsupdate.com or just mirrored that URL as well. If the worm really targets windowsupdate.com and not windowsupdate.microsoft.com then the worm author isn't as smart as they'd like to think they are :) (big surprise there huh....) Regards, Simon _______________________________________________ Nznog mailing list Nznog(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog _______________________________________________ Nznog mailing list Nznog(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog
deny tcp any any eq 135 (31770 matches) (cleared 48 hours ago) deny tcp any any eq 139 (911 matches) deny udp any any eq 135 (965 matches) For what it's worth..........from the router here on Nauru connected to the thin pipe with IntelSat/Reach............. Rgds., Jon
Nathan,
Are you aware of microsoft being affected from the DDoS of this virus yet? Seeing as you people will probably hear first off.
P.S. I dont want you to loose your job so you can mail me off list if you like:)
Barry
I don't know about direct effects of the worm, but both windows update and the microsoft sites in general seemed to be down for many hours yesterday afternoon.... maybe it was just a huge influx of people trying to get at the patches, or maybe some server upgrades went awry...(apparently MS were going to increase their web serving capacity...) Also I tried Windows Update from a Windows 2000 machine just now and although it appears to be working, all is not well because it reports "There are no updates available for your computer" when I know full well that it normally keeps insisting that I install the .NET stuff and Media player 9. (And a few other things under the windows section that I normally refuse to install) Perhaps MS have temporarily suspended downloading of "non critical" updates to reduce the server load from people who go to windows update primarily to get the security related updates.... Regards, Simon
According to articles posted on the web, Microsoft installed Windows Update from scratch (fresh install), and since then, updates that needed downloading have failed to show. Some have suggested changing the language to EN-US and this will fix the problem, but I have yet to see proper solution as yet. Regards Jithen -----Original Message----- From: Simon Byrnand [mailto:simon(a)igrin.co.nz] Sent: Saturday, 16 August 2003 9:57 a.m. To: Barry Murphy Cc: NZ NOG Subject: Re: [nznog] blaster worm
Nathan,
Are you aware of microsoft being affected from the DDoS of this virus yet? Seeing as you people will probably hear first off.
P.S. I dont want you to loose your job so you can mail me off list if you like:)
Barry
I don't know about direct effects of the worm, but both windows update and the microsoft sites in general seemed to be down for many hours yesterday afternoon.... maybe it was just a huge influx of people trying to get at the patches, or maybe some server upgrades went awry...(apparently MS were going to increase their web serving capacity...) Also I tried Windows Update from a Windows 2000 machine just now and although it appears to be working, all is not well because it reports "There are no updates available for your computer" when I know full well that it normally keeps insisting that I install the .NET stuff and Media player 9. (And a few other things under the windows section that I normally refuse to install) Perhaps MS have temporarily suspended downloading of "non critical" updates to reduce the server load from people who go to windows update primarily to get the security related updates.... Regards, Simon _______________________________________________ Nznog mailing list Nznog(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog
On Friday, 15 August 2003, at 17:56PM, Simon Byrnand wrote:
I don't know about direct effects of the worm, but both windows update and the microsoft sites in general seemed to be down for many hours yesterday afternoon.... maybe it was just a huge influx of people trying to get at the patches, or maybe some server upgrades went awry...(apparently MS were going to increase their web serving capacity...)
That "upgrade" seems involve becoming a customer of Akamai; perhaps the glitches had more to do with that transition than any attack traffic or service load. Joe
participants (6)
-
Barry Murphy -
Jithen Singh -
Joe Abley -
Jon Leeman -
Nathan Mercer -
Simon Byrnand