[40718] in North American Network Operators' Group
RE: Code Red 2 Erratication
daemon@ATHENA.MIT.EDU (Greg A. Woods)
Sun Aug 19 10:55:54 2001
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
From: woods@weird.com (Greg A. Woods)
To: Fearghas McKay <fm@st-kilda.org>
Cc: Joe Blanchard <jblanchard@wyse.com>,
nanog@merit.edu (North America Network Operators Group Mailing List)
In-Reply-To: <p05100310b7a54a3b9e97@[212.20.247.51]>
Reply-To: nanog@merit.edu (North America Network Operators Group Mailing List)
Message-Id: <20010819145511.5D95ED9@proven.weird.com>
Date: Sun, 19 Aug 2001 10:55:11 -0400 (EDT)
Errors-To: owner-nanog-outgoing@merit.edu
[ On Sunday, August 19, 2001 at 11:56:57 (+0100), Fearghas McKay wrote: ]
> Subject: RE: Code Red 2 Erratication
>
> Fancy a role in Episode 2, Attack of the Code Red 2 Worm? No, this is
> not a new B-grade movie but how you can be a good internet citizen
> and let people know that their server has been infected by the Worm.
It is very impolite to send automated notifications, even one per day,
especialy if dozens, or hundreds, or millions of Apache users all start
doing this. Indeed the result could be worse for the net in general
than CR itself. At least CR only affects the lame software that can be
affected.
Haven't we learned anything yet from the days when people wrote scripts
to try and report DNS errors by parsing their named logs and e-mailing
back to the zones that appear to have the problems?
--
Greg A. Woods
+1 416 218-0098 VE3TCP <gwoods@acm.org> <woods@robohack.ca>
Planix, Inc. <woods@planix.com>; Secrets of the Weird <woods@weird.com>
