Re: nimda probes
On Thu, Sep 20, 2001 at 09:15:58AM -0400, dman wrote:
> On Thu, Sep 20, 2001 at 04:55:23PM +1000, Sam Varghese wrote:
> | Nicholas Petreley had this suggestion for redirecting
> | nimda probes using Apache:
> |
> | RedirectMatch ^.*\.(exe|dll).* http://support.microsoft.com
>
> This is clever. I wonder, though, if the worm will actually follow
> the redirect.
>
the worm wouldn't even know the difference, to it it looks like it would
hit microsofts site from your url if it tries those extentions.
i love apache :P
--
Adam McDaniel
Infrastructure Technology Consultant
M-Tech Mercury Information Technology, Inc.
Reply to: