[olug] from 25KB to 750KB overnight

[David Walker]

If an exe is requested from my server I insert an ipchains rule to block
their IP.
This seems to allow my server to close the connection while leaving the
client (the worm) thinking that the connection is open and waiting for
it to continue.

I'm running AOLServer so I can't tell you how to do this in Apache.

On Wednesday 19 September 2001 10:10, you wrote:
> I have a very low volume webserver generally 25KB of log in 3 days.
> last night I was blessed with the receiving end of Nimba.  Over night
> my logs went from 25KB to 750 KB.
>
> I've contacted 3 people that have infected servers by phone and another
> 3 by email and a few more I've just don't care about.
>
> Just doing my part.  BTW, I love Apache. :)
>
> Eric
>
> __________________________________________________
> Terrorist Attacks on U.S. - How can you help?
> Donate cash, emergency relief information
> http://dailynews.yahoo.com/fc/US/Emergency_Information/
>
> -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_
>
> For help contact olug-help at bstc.net - run by ezmlm
> to unsubscribe, send mail to olug-unsubscribe at bstc.net
> or `mail olug-unsubscribe at bstc.net < /dev/null`
> (c)2001 OLUG http://www.olug.org
>
> -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

For help contact olug-help at bstc.net - run by ezmlm
to unsubscribe, send mail to olug-unsubscribe at bstc.net
or `mail olug-unsubscribe at bstc.net < /dev/null`
(c)2001 OLUG http://www.olug.org

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_