Re: [cobalt-users] NIMDA

[Carrie Bartkowiak <ravencarrie@xxxxxxxx>]

On Sun, 30 Sep 2001 10:09:13 +0300, Mustafa Cavcar mumbled something like:
>>How are we going to stop these NIMDA attacks filling logs?

Quite honestly, the only thing I can think of is to unplug the server. Maybe contacting your upstream provider might help, if they can block the traffic at the router, but since they're normal web requests (from what I gather; I wasn't getting mail for the big Nimda discussion) you can't block them and can't stop them from getting recorded in your logs.

Btw, I visited a web site and got Nimda, it shot across my home network like wildfire but luckily no one was stupid enough to click on the nice little email it left on their desktop. Easy clean-up job on the other machines, took a bit to get it off of mine. First time I've been infected with a virus after 5 yrs of being on the net with no virus scanner - and wouldn't it figure, it comes from a damn web page rather than an email. Huff. Didn't do any damage though since I don't have a "default" mail program specified and that kinda cut it off at the knees. It just left junk *everywhere*. 

--
CarrieB
"The language and concepts contained herein are guaranteed not to cause eternal torment in the place where the guy with the horns and pointed stick conducts his business." --Frank Zappa