Re: [cobalt-users] Worst day yet for Code Red (at least here)

[Michael <mike@xxxxxxxxxx>]

At 11:19 PM 08/05/01 +0200, you wrote:
>Why would you want that? Its doing no harm what so ever to your RaQ.
>I'm sure that if your co-lo could, they would filter it at their core.
>
>At 15:55 5-8-2001 -0400, you wrote:
>>I know we're immune but I've been watching the number of Code Red incursions
>>against my Raq.  Where previously I'd been hit anywhere between 150-250
>>times a day, today at 3:50PM I've been probed 516 times.  Is it possible
>>that these probes could be stopped at the co-lo's router?  Would it make a
>>difference?


I feel for ya bro, I was gettting 500+ sircams to my raq4 before I put in procmail filters.  I still get the bandwidth consumed, the data stream is still intact, they just go to /dev/null instead of my in box.  According to my procmail log I am STILL being relentlessly hammered, it just don't "seem" as bad when you don't have to dload the messages.


Mike