[40713] in North American Network Operators' Group
RE: Code Red 2 Erratication
daemon@ATHENA.MIT.EDU (Joe Blanchard)
Sun Aug 19 02:18:03 2001
Message-ID: <E9BBE0941932D511934C0002A52CDB4E2D0824@sj-exchange.wyse.com>
From: Joe Blanchard <jblanchard@wyse.com>
To: nanog@merit.edu
Date: Sat, 18 Aug 2001 23:15:19 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01C12876.523A77E0"
Errors-To: owner-nanog-outgoing@merit.edu
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
------_=_NextPart_001_01C12876.523A77E0
Content-Type: text/plain;
charset="iso-8859-1"
Never mind, seems to do nothing that I can see.
Oh Well
-Joe
-----Original Message-----
From: Joe Blanchard
Sent: Saturday, August 18, 2001 10:40 PM
To: nanog@merit.edu
Subject: Code Red 2 Erratication
Not sure if this will do anything, but perhaps it will.
I created a file on several Appache servers called default.ida containing
garbage and weighting about 50 megs in size.
I've not had a chance to test the effects on the CodeRed worm infected boxes
nor the results of this, but it in theroey should choke them. I know it
choked my browser, at least in netscape on a linux box and then an IE5
browser on a MS box.
Maybe a fix? Who knows.
-Joe
------_=_NextPart_001_01C12876.523A77E0
Content-Type: text/html;
charset="iso-8859-1"
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>Code Red 2 Erratication</TITLE>
<META content="MSHTML 5.00.2314.1000" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT color=#0000ff face=Arial size=2><SPAN class=703491306-19082001>Never
mind, seems to do nothing that I can see. </SPAN></FONT></DIV>
<DIV><FONT color=#0000ff face=Arial size=2><SPAN
class=703491306-19082001></SPAN></FONT> </DIV>
<DIV><FONT color=#0000ff face=Arial size=2><SPAN class=703491306-19082001>Oh
Well</SPAN></FONT></DIV>
<DIV><FONT color=#0000ff face=Arial size=2><SPAN
class=703491306-19082001>-Joe</SPAN></FONT></DIV>
<BLOCKQUOTE style="MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader><FONT face="Times New Roman"
size=2>-----Original Message-----<BR><B>From:</B> Joe Blanchard
<BR><B>Sent:</B> Saturday, August 18, 2001 10:40 PM<BR><B>To:</B>
nanog@merit.edu<BR><B>Subject:</B> Code Red 2
Erratication<BR><BR></DIV></FONT><BR>
<P><FONT size=2>Not sure if this will do anything, but perhaps it will.
</FONT></P>
<P><FONT size=2>I created a file on several Appache servers called default.ida
containing garbage and weighting about 50 megs in size. </FONT></P>
<P><FONT size=2>I've not had a chance to test the effects on the CodeRed worm
infected boxes nor the results of this, but it in theroey should choke them. I
know it choked my browser, at least in netscape on a linux box and then an IE5
browser on a MS box. </FONT></P>
<P><FONT size=2>Maybe a fix? Who knows.</FONT> <BR><FONT size=2>-Joe
</FONT></P></BLOCKQUOTE></BODY></HTML>
------_=_NextPart_001_01C12876.523A77E0--
