Re: Printer issue

From: Rune Stromsness <runes_at_berkeley.edu>
Date: Fri, 19 Dec 2008 10:54:46 -0800

Jake -F Harwood wrote:
> Ivan,
>
> I know you have an automated nessus scan running once a week on the SNS
> nessus server, and receiving weekly nessus reports.
>
> is it happening more then once a week for you.?

We've definitely seen it on a frequent and irregular basis when we've
had printers that weren't protected. Investigation in netflow and
firewall logs show the data coming from all over the Internet.

In cases where the printer itself doesn't allow a service to be ACL'd
we've purchased cheap little ~$35 firewall devices to sit in front of
the printers and limit who can talk to them.

Rune

> -F
>
>
>
> ------------------------------------------------------------------------
>
>
> -------------------------------------------------------------------------
> The following was automatically added to this message by the list server:
>
> To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:
>
> http://micronet.berkeley.edu
>
> Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet. This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

-- 
Rune Stromsness
Systems Supervisor
Senior Systems Administrator
Network & Infrastructure Services
Residential and Student Service Programs IT
University of California, Berkeley
runes_at_berkeley.edu
510-643-8052
 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:
To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:
http://micronet.berkeley.edu
Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Received on Fri Dec 19 2008 - 10:54:56 PST

This archive was generated by hypermail 2.2.0 : Fri Dec 19 2008 - 10:54:56 PST