Re: No! Not Code Red (again)

[Gerry Soetrisno <tachyon@bombshelter.org>]

As Gord Mc.Pherson described so eloquently on Mon, Aug 06, 2001 at 01:54:09PM -0400,
gordzilla>   www.incidents.org makes mention that it's passible to impliment a
gordzilla>firewall rule that will slow down the CR/CR2 worm. Does anyone have a
gordzilla>sample of this rule as an ipchains command. I'm sure we've not seen the
gordzilla>last of this problem and I'd like to do what I can to help curb it's speed
gordzilla>of propogation.
gordzilla>

I also would like to see a solution using ipchains/iptables. However,
a solution for blocking the CR/CR2 from a cisco router DO exists.

http://iponeverything.net/CodeRed.html

Cheers,

-- 
Gerry Soetrisno (tachyon@bombshelter.org)
----------------------------------------------------------------
To me vi is Zen.  To use vi is to practice zen. Every command is
a koan. Profound to the user, unintelligible to the uninitiated.
You discover truth everytime you use it.
                                    -- reddy@lion.austin.ibm.com