[linux-elitists] nimda - cheese or notify script?

Phil Hughes fyl@ssc.com
Tue Sep 18 16:28:18 PDT 2001


The amazing Aaron Sherman wrote:
> On Tue, Sep 18, 2001 at 01:00:37PM -0700, Greg KH wrote:
> > On Tue, Sep 18, 2001 at 12:56:41PM -0700, Karsten M. Self wrote:
> > > Anyone aware of a nimda cheese counterworm or a notify script for
> > > shutting down the attack?
> > 
> > See:
> > 	http://www.advogato.org/person/hacker/#99
> > for one example.
> > 
> 
> I'm just doing this for the hell of it. If you know mod_rewrite,
> you can probably think of better things to do in response. 
> 
> <Location />
> 	RewriteEngine On
> 	RewriteRule cmd\.exe / [NC,L]
> 	RewriteRule root\.exe / [NC,L]
> 	RewriteRule Admin\.dll / [NC,L]
> 	RewriteRule default\.ida / [NC,L]
> </Location>

Wouldn't it be better to just rewrite them all to something like
http://www.microsoft.com?

-- 
Phil Hughes, Specialized Systems Consultants, Inc. (SSC)
    P.O. Box 55549, Seattle, WA 98155  (206)782-7733
>> Publishers of Linux Journal, Embedded Linux Journal, books and references <<
    E-mail: fyl@ssc.com  Direct: (206)297-8656 Fax: (206)782-7191
    SSC/Linux Journal web site: http://www.ssc.com/



More information about the linux-elitists mailing list