[NTLUG:Discuss] Red Worm flood on port 80

[Greg Edwards]

Steve Baker wrote:
> 
> Richard Geoffrion wrote:
> >
> > Is there anything that I could do to create havok with the systems scanning
> > me?  What about creating a default.ida file and filling it with some data?
> > (I know...that just fills up more bandwidth...)
> 
> But the systems causing the trouble are just dumb - but innocent - M$ users
> who's machine got infected with the virus.  Hitting them back would achieve
> nothing and would be likely to land you in jail if you were caught.
> 
> Their worst crimes were failing to install the security patches - and
> choosing M$ in the first place.  In an ideal world, either of those
> decisions would land you in jail - but regrettably, this is a MICROSOFT
> world - and not an ideal one.
> 
> ----------------------------- Steve Baker -------------------------------

I agree with Steve that the buyers of M$ aren't the cause as much as the
poorly engineered product they bought into.  If your going to go to the
trouble of trapping the hit on your server instead of blasting them send
their webmaster an email informing them that they are infected.  Remind
them of the patch they can get and somewhere in your email make sure
they know that this email came from a server that cannot be infected by
this virus because its running Linux.  Maybe we'll get a couple converts
out of it:)

-- 
Greg Edwards
New Age Software, Inc.
http://www.nas-inet.com