Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!tut.cis.ohio-state.edu!ucbvax!WLV.IMSD.CONTEL.COM!mcc
From: mcc@WLV.IMSD.CONTEL.COM (Merton Campbell Crockett)
Newsgroups: comp.protocols.tcp-ip
Subject: Re:  Did DCA really shut down the mailbridges because of the SPAN worm?
Message-ID: <8910181403.AA00580@WLV.IMSD.CONTEL.COM>
Date: 18 Oct 89 14:03:53 GMT
Sender: daemon@ucbvax.BERKELEY.EDU
Organization: The Internet
Lines: 12

Brian:

Yes, DCA did disconnect the MILNET Mail Bridges from the Internet Monday after-
noon.  They were reconnected Tuesday afternoon.  Using traceroute to probe the
net from the MILNET side produced a lot of port unreachables if the transition
from the MILNET occured on the West Coast and redirect storms if the transition
occured on the East Coast (primarily between Marina Del Ray and Cambridge).

NCC stated that the problem was related to a "worm"/"virus" which only affected
VMS systems.  No additional details were provided.

Merton