For those of your that are running the newest of the new Cisco IOS, there is
a way to block code red at the router, provided you don't need to allow
legitimate IDA traffic thru your router.
http://iponeverything.net/CodeRed.html
Good luck!
Robert S. Galloway
Network Security Engineer
IKANO Communications
...the Internet branding company
Official Data Networking Services Provider for the
Salt Lake Olympic Winter Games of 2002
[EMAIL PROTECTED]
801-415-8089
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Tuesday, August 07, 2001 6:51 PM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] New CodeRed like virus
>I see the same entries.
>NT 4.0 Workstation with Sp6a and no IIS or indexing installed.
>All my services have been running for 45 days now. So I would just like to
>stop this activity.
If you don't have IIS installed (or have IIS and the patch), you're
safe. All you can do is sit back and watch the log entries, unless your
upstream provider has the ability to block it.
The problem is that these attacks are coming from 400,000+ compromised
servers. If the media can't get the message across to the admins of half a
million servers, you're just going to have to sit back and be glad that
Ipswitch uses its own web server and not IIS! :)
-Scott
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
