Re: [cobalt-users] NIMDA Attacks - Anyway to deny requests?

["William Moore" <bmoore@xxxxxxxxxxxxxxxxx>]

----- Original Message -----
From: "Scott F" <scott_falco@xxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Saturday, September 22, 2001 3:54 PM
Subject: [cobalt-users] NIMDA Attacks - Anyway to deny requests?


>
> It actually has worked quite well and has dropped my
> probes/scans from this windoz worm to just around
> 20-40 per day now (unique IP's). I have 9 machines in
> 3 locations, and I've managed to assemble a list of
> around 500 unique IP's off each box (of course all
> windoz cancer infected machines) using that script, so
> it really isn't so bad. I really don't have a problem
> blocking infected machines hammering away at my boxes.
> And this has pretty much become a non-issue for me
> since I started doing so, unlike the first day when it
> hit the wild. :-)
>
> -Scott
>

Question,  how did you configure your machines to block the infected ip
addresses ?

I would appreciate an example as I do not know how to do it.

TYA

Bill