John, >From what I see going on here I'd have to agree with your responses. Scott also hit the nail on the head with his NAT explanation. Using NAT, I believe, will not keep Nimda from spreading. Diligent server administration and hot fixes, virus scanning software: 'like the awesome declude products' will kill it in its' tracks. I found some code here that will also help and am posting it here:
Create a file in your web root called something like "Custom404.asp", with this content (customize the friendly part as much as you wish): <% 'Custom404.asp page to thwart Nimda DoS attacks on IIS 'by Humankind Systems, Inc. http://hksi.net/ 'No support or guarantees of any kind are granted with this 'code. Use at your own risk. Distribute freely. 'Get the entire URL requested myRequest=Request.ServerVariables("QUERY_STRING") 'A list of filenames Nimda looks for myBadList="cmd.exe,root.exe,admin.dll,default.ida" 'Detect a GET request from the Nimda virus and take appropriate action arrBadString=Split(myBadList,",") for i=0 to UBound(arrBadString) if inStr(myRequest,arrBadString(i))>0 then 'turn offending server back on itself Response.redirect "http://127.0.0.1"; end if next %> <html> <head> <title>Page Not Found</title> </head> <body> Sorry, but that page was not found on our server. <p> Here is a link back to our <a href="/">Home Page</a>. </body> </html> Not wanting to stir the pot but it's time to close the thread ;-) ~Rick ----- Original Message ----- From: "John Tolmachoff" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, September 30, 2002 9:30 AM Subject: RE: [IMail Forum] Firewalls and email servers > Jonathan suggested I did not know what I was talking about in this post: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/msg58273.htm > l > > He challenged me in this post: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/msg58315.htm > l > > I responded with this post: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/msg58346.htm > l > This was backed up by Cory > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/msg58354.htm > l > and Jason: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/msg58358.htm > l > > Jonathan challenged me that I was wrong, I posted with a professional > and courteous response. I would expect a professional and courteous > response from Jonathan to my post. > > Some may see this as childish, but this is a discussion forum and I am > awaiting a close to this discussion. > > John Tolmachoff > IT Manager, Network Engineer > RelianceSoft, Inc. > Fullerton, CA 92835 > www.reliancesoft.com > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of Jonathan Moore > Sent: Sunday, September 29, 2002 7:31 AM > To: [EMAIL PROTECTED] > Subject: RE: [IMail Forum] Firewalls and email servers > > >> I have noted the missing response from Jonathan. << > > John, > > Can you let me know to what this is in reference to? > > --Jonathan Moore > ___________________________________________________________________ Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
