Re: nimda probes
"Brooks R. Robinson" <brooks.robinson@rides.com> writes:
> > > the worm wouldn't even know the difference, to it it looks like it would
> > > hit microsofts site from your url if it tries those extentions.
> >
> > Not correct, it gets a Redirect as the response, and it's its
> > responsibility to follow it, unless it's using a toolkit that does so
> > automatically.
> >
> > Code Red, for instance, wouldn't follow redirects.
>
> What about port forwarding? It'd still up the CPU usage on a machine, but
> would it have the same results? I so much want to do this.
You could always set up a tarpit:
http://www.hackbusters.net/LaBrea/
Reply to: