RE: [FW1] Cease and Desist Email Forms

[Frank W. Keeney <FKeeney@hsa.com>]

This is what I send:



This note is to inform you that our firewall denied the
following traffic that appears to originate from your network.

Perhaps one of your hosts was compromised or someone spoofed
the source address. Of course one of your customers or users
could be attempting a break into our network.

Please investigate and reply.


Date   Time (PDT)                                                 Source
Port      Destination Port
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - - - - - - - - - - - - - - - -




+++++++++++++++++++++++++++++++++++++++++++++++++++++++
Frank Keeney, Network Services, Home Savings of America
+1 626-814-5080 mailto:fkeeney@hsa.com
+++++++++++++++++++++++++++++++++++++++++++++++++++++++


	


	I know the question I am about to ask is often
Company/Organization specific, but I was wondering if anyone had some
input or examples for me to work with that you are able to share.  I am
looking for your standard Cease & Desist email's you send out, possibly
prior to the actual need for an incident report.  I'm sure there is some
standard verb-age that possibly gets used, or maybe even some sort of
Quote of state or federal code.  Anything would be gladly reviewed. 

	thanks for your assistance,

	-jon



	
========================================================================
========
	     To unsubscribe from this mailing list, please see the
instructions at
	               http://www.checkpoint.com/services/mailing.html
	
========================================================================
========


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================