RE: Cod Red HELP!!!!

["van Oosterom, Peter" <Peter.vanOosterom () atosorigin com>]

/etc/hosts.allow connection should be refused

-----Original Message-----
From: Advanced Hosting UNIX Admin Daniel Fairchild
[mailto:danielf () supportteam net]
Sent: Tuesday, August 07, 2001 2:52 PM
To: snort-users () lists sourceforge net; netfilter () lists samba org;
bridge () math leidenuniv nl
Subject: [Snort-users] Cod Red HELP!!!!


Hello TIA 


we are having issues with code red on our unix servers we have 508 IPs per 
server and the Code Red scanning is acting like a Massive DDoS on our unix 
machines we are getting all these requests for default.ida and we are trying

to figure out how to block it 

does any one have any sugesstions. 


TIA again

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users