[luau] nimda worm

MonMotha monmotha at indy.rr.com
Thu May 9 18:58:32 PDT 2002


Either ignore it, notify the infected box owner, or complain to 
abuse at theirisp.

Usually the best course of action is to ignore it and maybe just drop 
them with a packet filter (like the BLACKHOLE option in my ruleset).

--MonMotha

Ronnie T Livingston wrote:
> My server keeps on getting hit by what I can only assume to be another
> machine with the nimda worm on it.  What do you guys normally do in this
> case, ignore it??
> 
> -Ronnie
> 
> The only time you don't fail is the last time you try anything-- and it works.  -William Strong
> 
> _______________________________________________
> LUAU mailing list
> LUAU at videl.ics.hawaii.edu
> http://videl.ics.hawaii.edu/mailman/listinfo/luau
> 





More information about the LUAU mailing list