Travis, you're still exposing more ports than you should on that NT 4.0 server; you're still relying on the robustness of Microsoft software and that's a losing bet.
I'd suggest that you put that server behind a firewall or buy BlackIce for it and get the benefit of BlackIce shunning DHA attacks (it seems to be a recurring favorite on this list). At least download the MBSA from Microsoft and find out what other best practices you should be following, such as not exposing the SQL Monitor to the web (hello, SQL Slammer worm!) Andrew 8) > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Travis Sullivan > Sent: Thursday, September 29, 2005 11:50 AM > To: Declude.JunkMail@declude.com > Subject: Re: [Declude.JunkMail] emergency! declude.exe won't install > > the dotNET framework I installed for dmrtg to work.... I > missed the service pack/hot fix, 48 hours or so later....BAM! > > Those exploit bots are fast! > > Travis > > ----- Original Message ----- > From: "Darrell ([EMAIL PROTECTED])" > <[EMAIL PROTECTED]> > To: <Declude.JunkMail@declude.com> > Sent: Thursday, September 29, 2005 1:47 PM > Subject: Re: [Declude.JunkMail] emergency! declude.exe won't install > > > > Travis, > > What exploit did you get pop'ed with? > > Darrell > > > -------------------------------------------------------------- > ---------- > > Check out http://www.invariantsystems.com for utilities for > Declude And > > Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI > integration, > > MRTG Integration, and Log Parsers. > > > > Travis Sullivan writes: > >> > >>> ################################ > >>> E:\IMAIL>declude.exe > >>> Declude 1.81 (C) Copyright 2000-2004 argc<2 First time running... > >>> installing... > >>> ################################ > >> > >> Well, even the -diag states it's running for the first time. > >> Nevertheless, after about the 10th time of installing > it... it took and > >> now is working well again. whew! Travis --- > >> This E-mail came from the Declude.JunkMail mailing list. To > >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >> type "unsubscribe Declude.JunkMail". The archives can be found > >> at http://www.mail-archive.com. > > > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
