Re: Code Red errata

At 11:25 9/08/2001, Don Stokes wrote:

Steve Phillips wrote:

...

Ok, to expound a little here, I am using the content matching features of the Alteon AD4 to redirect any incoming GET request that has the string "default.ida" in it - this is possible as any traffic coming in internationally comes in through the switch at some point before it hits the customer network.

So who else is doing this? Until 10am my box, here in Paradise-land, was logging a moderately consistent 5-15 requests an hour. Since then, I've seen just one (from an Indian address).

Whats even more interesting, put the filter in reverse and catch your customers that are infected <grin> we are now busy contacting them all :) -- Steve Systems Admin, Asia Online (NZ) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog