Slashdot Mirror

← Back to Stories (view on slashdot.org)

Handling User Grown Machines on a Large Network?

Posted by Cliff on from the where-infections-run-rampant dept.

matth asks: "Recently with the outbreak of the MSBLASTER worm and the startup of the college semester here in the US we've been hit by a big problem here where I work. Many students are bringing in machines from home, often times infected. The infections are so bad that they bring the whole network to a crawl. Yes, you can install ACLs on edge routers and put a router between the dorms and the rest of your network, but it still brings the dorm to a crawl. You can make sure people install the patches, but what if someone re-installs Windows, or brings in another machine, and what about NEXT year? From the Slashdot community, how have sysadmins out there dealt with this? How can you manage each machine in a network such as a college, where people are bringing their own machines in from the outside? ACLs on routers... but what about for the segmented network?"

7 of 611 comments (clear)

  1. Simple... by woodchip · · Score: 5, Funny

    just ban users from your network.

  2. You could just... by gsperling · · Score: 5, Funny

    ...tell students at registration that Windows machines are not allowed on the network, and that they must install Linux. This will not only clean up your network problems, but it will also give the students a sense of doing the right thing for their computers. Along with their free condoms, give 'em free Linux CDs.

  3. YES, THAT'S A GOOD IDEA by YOU+ARE+SO+FIRED! · · Score: 5, Funny

    "Along with their free condoms, give 'em free Linux CDs."

    "Here. You'll never use this first item if you choose to use the second item. Have fun, and welcome to college."

    You are sooooo fired.

  4. DHCP tricks by TheSHAD0W · · Score: 5, Funny

    You ought to be able to tweak your DHCP so you can block machines that are broadcasting this badly by telling them their default gateway is localhost.

  5. start with the freshman handbook by b17bmbr · · Score: 5, Funny
    Chapter 2 Personal Computers
    No personal computers will be allowed unless they are running Linux, FreeBSD, OS X, or another variety of *nix. If you are bringing a PC, please see the installtion CD in the back of the Freshman orientation handbook. For installation instructions, find the guy in your dorm with long hair, glasses, birkenstocks, and a penguin on his shirt. For payment, beer will usually do. Or, if you are under 21, and can't find someone to buy for you, perhaps a bag of Starbucks will suffice. However, if you are a female, just acknowleging him at least once during the semester, when you are with your friends will be plenty.
    --
    My problem? I was perfectly gruntled, until some numbnuts came by and dissed me.
  6. Post lists by Maxwell'sSilverLART · · Score: 5, Funny

    Assuming you can identify the port from which the infected traffic is coming, post a list of all infected rooms on the front door of the dorms, with an explanation that "these computers are causing your network to suck."

    The problem will be fixed.

    --
    Moderate drunk! It's more fun that way!
  7. Re:responsibility by Durandal64 · · Score: 4, Funny
    How about we tax stupidity next?
    We do. It's called the lottery.