[39986] in North American Network Operators' Group
Re: Hard data on network impact of the "Code Red" worm?
daemon@ATHENA.MIT.EDU (Wojtek Zlobicki)
Mon Jul 30 14:08:32 2001
Message-ID: <007901c11922$8a698c40$0602a8c0@wojtek>
From: "Wojtek Zlobicki" <wojtekz@idirect.com>
To: "Larry Sheldon" <lsheldon@creighton.edu>
Cc: <nanog@nanog.org>
Date: Mon, 30 Jul 2001 14:07:48 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Errors-To: owner-nanog-outgoing@merit.edu
Um ..... brain in SirCam Mode :) Oops!!
----- Original Message -----
From: "Larry Sheldon" <lsheldon@creighton.edu>
To: <wojtekz@idirect.com>
Cc: <lsheldon@creighton.edu>
Sent: Monday, July 30, 2001 2:03 PM
Subject: Re: Hard data on network impact of the "Code Red" worm?
> > > Also, is it possible that the critter got through firewalls and "did
> > harm",
> > > but could not get back out again? I don't know of any cases like
that.
> >
> > Well this just makes it a good idea to proxy outbound SMTP, just set up
an
> > access list for only allowing outbound TCP port 25 from certain hosts
> > (verified mail servers).
>
> Umm.....Code Red Worm is all HTTP--port 80, no?
>
> I disremember any SMTP -- port 25 involvement.
>
> --
> -.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-
> . .
> - L. F. (Larry) Sheldon, Jr. -
> . Unix Systems and Network Administration .
> - Creighton University Computer Center-Old Gym -
> . 2500 California Plaza .
> - Omaha, Nebraska, U.S.A. 68178 Two identifying characteristics -
> . lsheldon@creighton.edu of System Administrators: .
> - 402 280-2254 (work) Infallibility, and the ability to -
> . 402 681-4726 (cellular) learn from their mistakes. .
> - 402 332-4622 (residence) -
> . http://www.creighton.edu/~lsheldon Adapted from Stephen Pinker .
> -.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-
