[unisog] Web Cache Filter of Code Red Probes

lbuchana at csc.com lbuchana at csc.com
Mon Jul 30 16:50:09 GMT 2001


Hi,

I think a much better filter would be to prevent web servers from making
any connection to the outside world.  Granted this will not prevent the web
server from getting infected, but it would prevent it from infecting other
sites.  The Web Cache filter would likely need to be tuned for each new
version of Code Red.

B Cing U

Buck

Loren "Buck" Buchanan (lbuchana at csc.com) \ #include <generic.disclaimer>
7700 Hubble Drive     phone 301-794-2560  \ #include <computer.security>
Lanham, MD 20706                           \ #include <electronic.music>
Email attachments, just say NO!             \ #include <genealogy.roots>



More information about the unisog mailing list