Web Hosting Talk







View Full Version : NIMDA, Code Red traffic FILTER...


H2
10-23-2001, 11:23 PM
Hi

Is it possible to setup filtering against Microsoft_Viruses (NIMDA, etc)

I think their hits generate a lot of traffic!

http://www.cisco.com/warp/public/63/nimda.shtml

phpjames
10-24-2001, 12:08 AM
I dont know about stopping it but if you create a .htaccess file and throw this in there it think it will help kill it on the net.

redirect /scripts http://www.stoptheviruscold.invalid

redirect /MSADC http://www.stoptheviruscold.invalid

redirect /c http://www.stoptheviruscold.invalid

redirect /d http://www.stoptheviruscold.invalid

redirect /_mem_bin http://stoptheviruscold.invalid

redirect /msadc http://stoptheviruscold.invalid

RedirectMatch (.*)\cmd.exe$ http://stoptheviruscold.invalid$1


Seems to be a valid solution. MS SUCKS!:angry:

H2
10-24-2001, 12:16 AM
btw, we use Linux :). Yes, you are right, :puke: Miscrosoft.... s**

I think that it will generate traffic. Is it possible to filter such hits via cisco routers?

phpjames
10-24-2001, 12:21 AM
Ya this method will still let the virus probe your server but hopefully if everyone on the net patches WIN2k or uses this the virus will die. I say again MS SUCKS!:angry:

I am not sure how to boot the virus in a cisco router but theres got to be a way...anything is possible.

Good luck