Re: Replies are all bouncing

2001-08-01 Thread Bill Campbell

On Wed, Aug 01, 2001 at 08:53:04PM -0500, Jim Conner wrote:
>I was refering to Code Red being a bandwidth hog as it's infecting IIS and 
>probing other boxes.  Then again, I could be wrong.

That's certainly one problem with it.  The other major thing it was doing
last week is attacking some Cisco routers which have their web server
turned on to the world.  We have a customer who's on a DSL connection with
a Cisco box connecting to the DSL which bounced several times before their
DSL provider figured out what was going on, and had him disable the server.
Our upstream provider had a significant outage on the same day which they
said was due to routing problems which could be related.  Personally I
think Cisco is to routers what Microsoft is to desktops.

We configure routers so that all access to their admin servers is filtered
to prevent access except from specific sites.  We're now using Linux boxes
with WAN cards in new installations, and these are only accessible with
secure shell.

Bill
--
INTERNET:   [EMAIL PROTECTED]  Bill Campbell; Celestial Software LLC
UUCP:   camco!bill  PO Box 820; 6641 E. Mercer Way
FAX:(206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676
URL: http://www.celestial.com/

Democracy, n.:
A government of the masses.  Authority derived through mass
meeting or any other form of direct expression.  Results in mobocracy.
Attitude toward property is communistic... negating property rights.
Attitude toward law is that the will of the majority shall regulate,
whether it is based upon deliberation or governed by passion,
prejudice, and impulse, without restraint or regard to consequences.
Result is demagogism, license, agitation, discontent, anarchy.
-- U. S. Army Training Manual No. 2000-25 (1928-1932),
   since withdrawn.
___
http://linux.nf -- [EMAIL PROTECTED]
Archives, Subscribe, Unsubscribe, Digest, Etc 
->http://linux.nf/mailman/listinfo/linux-users



Re: Replies are all bouncing

2001-08-01 Thread Jim Conner

I was refering to Code Red being a bandwidth hog as it's infecting IIS and 
probing other boxes.  Then again, I could be wrong.

Jim

On Wednesday August 01, 2001 12:20 pm, [EMAIL PROTECTED] wrote:
> On Wednesday 01 August 2001 01:56, you wrote:
> > Quite a few people were getting this error.  Possibly due to the Code Red
> > worm.  It was supposed to hit 8pm EDT, that would be about 10am your
> > time(if my math and timezones are correct).  Haven't heard if it was
> > unrelated to this or not.
>
> I haven't watched this thread, but the code red worm should not affect you
> if you use *nix as your mail and web servers
>

-- 
 
  8:42pm  up 8 days, 21:16,  2 users,  load average: 0.39, 0.38, 0.19

Running Caldera eD2.4 - Linux - because life is too short for reboots...

_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com

___
http://linux.nf -- [EMAIL PROTECTED]
Archives, Subscribe, Unsubscribe, Digest, Etc 
->http://linux.nf/mailman/listinfo/linux-users



Re: Replies are all bouncing

2001-08-01 Thread Rick Sivernell

On Wednesday 01 August 2001 01:24 pm, you wrote:
> On Wed, Aug 01, 2001 at 01:20:09PM -0400, [EMAIL PROTECTED] wrote:
> ...
>
> >I haven't watched this thread, but the code red worm should not affect you
> >if you use *nix as your mail and web servers
>
> Actually one of my Linux-only customers was affected by this last week, not
> because of anything to do with Linux, but because they're on ADSL with a
> Cisco DSL ``modem'' which was hit.  It appears that some Cisco equipment
> runs a web server that was vulnerable to the attack.
>
> Of course I have to ask why anybody wouldn't have already either turned off
> the web interface on their router, or at least put in filters to restrict
> access to it to just those people who should be doing the administration?
>
> Then again, I've never been able to figure out why responsible people run
> Windows on anything critical.
>
> Bill
> --
> INTERNET:   [EMAIL PROTECTED]  Bill Campbell; Celestial Software LLC
> UUCP:   camco!bill  PO Box 820; 6641 E. Mercer Way
> FAX:(206) 232-9186  Mercer Island, WA 98040-0820; (206)
> 236-1676 URL: http://www.celestial.com/
>
> When you have an efficient government, you have a dictatorship.
> -- Harry Truman

That is easy.
1. They are lazy
2. Mostly Brain dead
3 Just do not care
4 Easily led by the nose to the chopping block
5  Stupidity/gullible
-- 
Rick Sivernell
Dallas, Texas  75287
972 306-2296
[EMAIL PROTECTED]
Caldera Open Linux eWorkStation 3.1
Registered Linux User

? ? ? ? .~.
? ? ? ?/ v \
? ? ? /( _ )\
? ? ? ? ^ ^
In Linux we trust!
___
http://linux.nf -- [EMAIL PROTECTED]
Archives, Subscribe, Unsubscribe, Digest, Etc 
->http://linux.nf/mailman/listinfo/linux-users



Re: Replies are all bouncing

2001-08-01 Thread Bill Campbell

On Wed, Aug 01, 2001 at 01:20:09PM -0400, [EMAIL PROTECTED] wrote:
...
>I haven't watched this thread, but the code red worm should not affect you
>if you use *nix as your mail and web servers

Actually one of my Linux-only customers was affected by this last week, not
because of anything to do with Linux, but because they're on ADSL with a
Cisco DSL ``modem'' which was hit.  It appears that some Cisco equipment
runs a web server that was vulnerable to the attack.

Of course I have to ask why anybody wouldn't have already either turned off
the web interface on their router, or at least put in filters to restrict
access to it to just those people who should be doing the administration?

Then again, I've never been able to figure out why responsible people run
Windows on anything critical.

Bill
--
INTERNET:   [EMAIL PROTECTED]  Bill Campbell; Celestial Software LLC
UUCP:   camco!bill  PO Box 820; 6641 E. Mercer Way
FAX:(206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676
URL: http://www.celestial.com/

When you have an efficient government, you have a dictatorship.
-- Harry Truman
___
http://linux.nf -- [EMAIL PROTECTED]
Archives, Subscribe, Unsubscribe, Digest, Etc 
->http://linux.nf/mailman/listinfo/linux-users



Re: Replies are all bouncing

2001-08-01 Thread Matt . Carpenter


On Wednesday 01 August 2001 01:56, you wrote:
> Quite a few people were getting this error.  Possibly due to the Code Red
> worm.  It was supposed to hit 8pm EDT, that would be about 10am your
> time(if my math and timezones are correct).  Haven't heard if it was
> unrelated to this or not.
>

I haven't watched this thread, but the code red worm should not affect you
if you use *nix as your mail and web servers


___
http://linux.nf -- [EMAIL PROTECTED]
Archives, Subscribe, Unsubscribe, Digest, Etc 
->http://linux.nf/mailman/listinfo/linux-users



Re: Replies are all bouncing

2001-08-01 Thread Ronnie Gauthier

Not related, this has been happening to me randomly for a week or so.

Ronnie

On Wednesday 01 August 2001 01:56, you wrote:
> Quite a few people were getting this error.  Possibly due to the Code Red
> worm.  It was supposed to hit 8pm EDT, that would be about 10am your
> time(if my math and timezones are correct).  Haven't heard if it was
> unrelated to this or not.
>
> Jim
>
> On Wednesday August 01, 2001  1:31 am, Keith Antoine wrote:
> > All the replies I did this morning, but not those done privately were
> > bouinced from your server, wahst the problem mate ?? Didn't you want me
> > back ??
>
> 

-- 
Ronnie
==
Life can be a dream; or it can be a nightmare
it's all in your mind
___
http://linux.nf -- [EMAIL PROTECTED]
Archives, Subscribe, Unsubscribe, Digest, Etc 
->http://linux.nf/mailman/listinfo/linux-users



Re: Replies are all bouncing

2001-07-31 Thread Jim Conner

Quite a few people were getting this error.  Possibly due to the Code Red 
worm.  It was supposed to hit 8pm EDT, that would be about 10am your time(if 
my math and timezones are correct).  Haven't heard if it was unrelated to 
this or not.

Jim

On Wednesday August 01, 2001  1:31 am, Keith Antoine wrote:
> All the replies I did this morning, but not those done privately were
> bouinced from your server, wahst the problem mate ?? Didn't you want me
> back ??


-- 
 
  1:42am  up 8 days,  2:16,  4 users,  load average: 0.26, 0.41, 0.52

Running Caldera eD2.4 - Linux - because life is too short for reboots...

_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com

___
http://linux.nf -- [EMAIL PROTECTED]
Archives, Subscribe, Unsubscribe, Digest, Etc 
->http://linux.nf/mailman/listinfo/linux-users