[Gllug] Code Blue

[will]

----- Original Message -----
From: <tet at accucard.com>
To: <gllug at linux.co.uk>
Sent: Tuesday, September 18, 2001 4:52 PM
Subject: Re: [Gllug] Code Blue


>
> >We're being quite aggressively scanned at the moment,
>
> We've had 72 incidents since Sunday evening, each one consisting of
> 13 separate exploits attempts...

Our servers are taking a bit of a hammering becuase of this one.  The
following
code:

AliasMatch /(.*)/root.exe(.*) /u/httpd/htdocs/default.ida
AliasMatch /(.*)/cmd.exe(.*) /u/httpd/htdocs/default.ida
AliasMatch /(.*)/Admin.dll(.*) /u/httpd/htdocs/default.ida

should help speed up apache getting rid of the requests if you create a
blank:

/u/httpd/htdocs/default.ida

file (changing directories accordingly).  Apologies for the half email
earlier.  bloody outlook express.

Will.


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug