[40712] in North American Network Operators' Group
Code Red 2 Erratication
daemon@ATHENA.MIT.EDU (Joe Blanchard)
Sun Aug 19 01:41:46 2001
Message-ID: <E9BBE0941932D511934C0002A52CDB4E2D0820@sj-exchange.wyse.com>
From: Joe Blanchard <jblanchard@wyse.com>
To: nanog@merit.edu
Date: Sat, 18 Aug 2001 22:39:32 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01C12871.52D300A0"
Errors-To: owner-nanog-outgoing@merit.edu
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
------_=_NextPart_001_01C12871.52D300A0
Content-Type: text/plain;
charset="iso-8859-1"
Not sure if this will do anything, but perhaps it will.
I created a file on several Appache servers called default.ida containing
garbage and weighting about 50 megs in size.
I've not had a chance to test the effects on the CodeRed worm infected boxes
nor the results of this, but it in theroey should choke them. I know it
choked my browser, at least in netscape on a linux box and then an IE5
browser on a MS box.
Maybe a fix? Who knows.
-Joe
------_=_NextPart_001_01C12871.52D300A0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
5.5.2653.12">
<TITLE>Code Red 2 Erratication</TITLE>
</HEAD>
<BODY>
<BR>
<P><FONT SIZE=3D2>Not sure if this will do anything, but perhaps it =
will. </FONT>
</P>
<P><FONT SIZE=3D2>I created a file on several Appache servers called =
default.ida containing garbage and weighting about 50 megs in size. =
</FONT>
</P>
<P><FONT SIZE=3D2>I've not had a chance to test the effects on the =
CodeRed worm infected boxes nor the results of this, but it in theroey =
should choke them. I know it choked my browser, at least in netscape on =
a linux box and then an IE5 browser on a MS box. </FONT></P>
<P><FONT SIZE=3D2>Maybe a fix? Who knows.</FONT>
<BR><FONT SIZE=3D2>-Joe </FONT>
</P>
</BODY>
</HTML>
------_=_NextPart_001_01C12871.52D300A0--
