Mailing List Archive

/etc/hosts.allow connection should be refused

-----Original Message-----
From: Advanced Hosting UNIX Admin Daniel Fairchild
[mailto:danielf@supportteam.net]
Sent: Tuesday, August 07, 2001 2:52 PM
To: snort-users@lists.sourceforge.net; netfilter@lists.samba.org;
bridge@math.leidenuniv.nl
Subject: [Snort-users] Cod Red HELP!!!!


Hello TIA


we are having issues with code red on our unix servers we have 508 IPs per
server and the Code Red scanning is acting like a Massive DDoS on our unix
machines we are getting all these requests for default.ida and we are trying

to figure out how to block it

does any one have any sugesstions.


TIA again

_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users